feat(cloudformation): Add sensitive param check

[tsmithv11]

User description

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

Description

Adds check for sensitive values in SSM param and

Fixes #6700
Fixes #6917

Checklist:

• I have performed a self-review of my own code
• I have commented my code, particularly in hard-to-understand areas
• I have made corresponding changes to the documentation
• I have added tests that prove my feature, policy, or fix is effective and works
• New and existing tests pass locally with my changes

---

Generated description

Below is a concise technical summary of the changes proposed in this PR:

Adds a new check for sensitive values in AWS Systems Manager (SSM) Parameter Store and enhances the existing Lambda environment credentials check. Implements a new class ParameterStoreCredentials to scan for hard-coded secrets in SSM Parameter values. Updates the LambdaEnvironmentCredentials check to skip values starting with 'handler.' or 'git.'. Extends the secret detection patterns in the secrets.py file to include password-specific patterns. Adds corresponding test cases for both new and updated checks.

Topic	Details
SSM Param Check	Implements a new check for detecting hard-coded secrets in AWS SSM Parameter Store values Modified files (3) checkov/cloudformation/checks/resource/aws/ParameterStoreCredentials.py tests/cloudformation/checks/resource/aws/example_ParameterStoreCredentials/mix.yaml tests/cloudformation/checks/resource/aws/test_ParameterStoreCredentials.py Latest Contributors(0) User Commit Date
Lambda Cred Check	Enhances the Lambda environment credentials check to ignore 'handler.' and 'git.' prefixed values Modified files (4) tests/cloudformation/checks/resource/aws/example_LambdaEnvironmentCredentials/PASS3.yaml tests/cloudformation/checks/resource/aws/example_LambdaEnvironmentCredentials/PASS2.yaml checkov/cloudformation/checks/resource/aws/LambdaEnvironmentCredentials.py tests/cloudformation/checks/resource/aws/test_LambdaEnvironmentCredentials.py Latest Contributors(2) User Commit Date manuchandrasekhar@gmai... fix-terraform-and-cdk-... January 28, 2024 gruebel fix-cloudformation-ign... November 12, 2023
Secret Detection	Extends secret detection patterns to include password-specific patterns and improves performance Modified files (1) checkov/common/util/secrets.py Latest Contributors(2) User Commit Date bo156 feat-secrets-used-10-c... December 07, 2023 gruebel fix-cloudformation-ign... November 12, 2023

This pull request is reviewed by Baz. Join @tsmithv11 and the rest of your team on (Baz).