Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Create main.tf #9

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Create main.tf #9

wants to merge 1 commit into from

Conversation

zehavit12
Copy link
Owner

No description provided.

Copy link
Contributor

@bridgecrew bridgecrew bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Bridgecrew has found errors in this PR ⬇️

@@ -0,0 +1,58 @@
resource "aws_iam_role" "iam_for_lambda" {
Copy link
Contributor

@bridgecrew bridgecrew bot Dec 1, 2022

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

CRITICAL   test zehavit
    Resource: aws_iam_role.iam_for_lambda | ID: zehavite12_aws_1653224234530

Description

Guidelines

environment {
variables = {
access_key = "AKIAIOSFODNN7EXAMPLE"
secret_key = "wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY"
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LOW   Base64 High Entropy String
    Resource: d70eab08607a4d05faa2d0d6647206599e9abc65 | ID: BC_GIT_6

Description

Entropy checks help detect unstructured secrets by measuring the entropy level of a single string. Entropy is a concept used to assign a numerical score to how unpredictable a password is or the likelihood of highly random data in a string of characters. Strings with a high entropy score are flagged as suspected secrets.

}
}

resource "aws_lambda_function" "analysis_lambda" {
Copy link
Contributor

@bridgecrew bridgecrew bot Dec 1, 2022

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

CRITICAL   test zehavit
    Resource: aws_lambda_function.analysis_lambda | ID: zehavite12_aws_1653224234530

Description

Guidelines


environment {
variables = {
access_key = "AKIAIOSFODNN7EXAMPLE"
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LOW   AWS Access Keys
    Resource: 25910f981e85ca04baf359199dd0bd4a3ae738b6 | ID: BC_GIT_2

Description

AWS Access Keys are long-term credentials for an IAM user or the AWS account root user. You can use access keys to sign programmatic requests to the AWS CLI or AWS API (directly or using the AWS SDK).

Access keys consist of two parts: an access key ID (for example, AKIAIOSFODNN7EXAMPLE) and a secret access key (for example, wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY).

Copy link

@bridgecrew-staging bridgecrew-staging bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Bridgecrew has found errors in this PR ⬇️

}
}

resource "aws_lambda_function" "analysis_lambda" {
Copy link

@bridgecrew-staging bridgecrew-staging bot Dec 1, 2022

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

CRITICAL   zehavit 5555555555
    Resource: aws_lambda_function.analysis_lambda | ID: zeinavshemes_aws_1663162688264

Description

Guidelines Guidelines Guidelines

@@ -0,0 +1,58 @@
resource "aws_iam_role" "iam_for_lambda" {
Copy link

@bridgecrew-staging bridgecrew-staging bot Dec 1, 2022

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

CRITICAL   zehavit 5555555555
    Resource: aws_iam_role.iam_for_lambda | ID: zeinavshemes_aws_1663162688264

Description

Guidelines Guidelines Guidelines

environment {
variables = {
access_key = "AKIAIOSFODNN7EXAMPLE"
secret_key = "wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY"

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LOW   Base64 High Entropy String
    Resource: d70eab08607a4d05faa2d0d6647206599e9abc65 | ID: BC_GIT_6

Description

Entropy checks help detect unstructured secrets by measuring the entropy level of a single string. Entropy is a concept used to assign a numerical score to how unpredictable a password is or the likelihood of highly random data in a string of characters. Strings with a high entropy score are flagged as suspected secrets.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant