issue/8248 #8586

mikereiddigital · 2024-11-25T13:35:42Z

A reference to the issue / Description of it

This updates the "Mod Platform" channel id with that of the Low Priority Alerts channel. The SecOps channel remains as a temporary destination until such time as we are provided the ID by that team.

How does this PR fix the problem?

See above.

How has this been tested?

Please describe the tests that you ran and provide instructions to reproduce.

{Please write here}

Deployment Plan / Instructions

Will this deployment impact the platform and / or services on it?

{Please write here}

Checklist (check `x` in `[ ]` of list items)

I have performed a self-review of my own code
All checks have passed
I have made corresponding changes to the documentation
Plan and discussed how it should be deployed to PROD (If needed)

Additional comments (if any)

{Please write here}

github-actions · 2024-11-25T13:38:32Z

`Trivy Scan` Success

Show Output

```hcl

Trivy will check the following folders:
terraform/environments/core-logging

Running Trivy in terraform/environments/core-logging
2024-11-25T13:38:18Z INFO [vulndb] Need to update DB
2024-11-25T13:38:18Z INFO [vulndb] Downloading vulnerability DB...
2024-11-25T13:38:18Z INFO [vulndb] Downloading artifact... repo="public.ecr.aws/aquasecurity/trivy-db:2"
2024-11-25T13:38:20Z INFO [vulndb] Artifact successfully downloaded repo="public.ecr.aws/aquasecurity/trivy-db:2"
2024-11-25T13:38:20Z INFO [vuln] Vulnerability scanning is enabled
2024-11-25T13:38:20Z INFO [misconfig] Misconfiguration scanning is enabled
2024-11-25T13:38:20Z INFO [misconfig] Need to update the built-in checks
2024-11-25T13:38:20Z INFO [misconfig] Downloading the built-in checks...
2024-11-25T13:38:21Z ERROR [misconfig] Falling back to embedded checks err="failed to download built-in policies: download error: OCI repository error: 1 error occurred:\n\t* GET https://ghcr.io/v2/aquasecurity/trivy-checks/manifests/1: TOOMANYREQUESTS: retry-after: 1.158177ms, allowed: 44000/minute\n\n"
2024-11-25T13:38:21Z INFO [secret] Secret scanning is enabled
2024-11-25T13:38:21Z INFO [secret] If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2024-11-25T13:38:21Z INFO [secret] Please see also https://aquasecurity.github.io/trivy/v0.57/docs/scanner/secret#recommendation for faster secret detection
2024-11-25T13:38:21Z INFO [terraform scanner] Scanning root module file_path="."
2024-11-25T13:38:23Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.s3-bucket-cloudtrail.aws_s3_bucket_logging.default" value="cty.NilVal"
2024-11-25T13:38:23Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc["live_data"].aws_subnet.data" value="cty.NilVal"
2024-11-25T13:38:23Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc["live_data"].aws_subnet.private" value="cty.NilVal"
2024-11-25T13:38:23Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc["live_data"].aws_subnet.public" value="cty.NilVal"
2024-11-25T13:38:23Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc["live_data"].aws_subnet.transit-gateway" value="cty.NilVal"
2024-11-25T13:38:23Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc["live_data"].aws_eip.public" value="cty.NilVal"
2024-11-25T13:38:23Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc["live_data"].aws_nat_gateway.public" value="cty.NilVal"
2024-11-25T13:38:23Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc["live_data"].aws_route.data-tgw" value="cty.NilVal"
2024-11-25T13:38:23Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc["live_data"].aws_route.private-tgw" value="cty.NilVal"
2024-11-25T13:38:23Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc["non_live_data"].aws_subnet.data" value="cty.NilVal"
2024-11-25T13:38:23Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc["non_live_data"].aws_subnet.private" value="cty.NilVal"
2024-11-25T13:38:23Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc["non_live_data"].aws_subnet.public" value="cty.NilVal"
2024-11-25T13:38:23Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc["non_live_data"].aws_subnet.transit-gateway" value="cty.NilVal"
2024-11-25T13:38:23Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc["non_live_data"].aws_eip.public" value="cty.NilVal"
2024-11-25T13:38:23Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc["non_live_data"].aws_nat_gateway.public" value="cty.NilVal"
2024-11-25T13:38:23Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc["non_live_data"].aws_route.data-tgw" value="cty.NilVal"
2024-11-25T13:38:23Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc["non_live_data"].aws_route.private-tgw" value="cty.NilVal"
2024-11-25T13:38:26Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:232"
2024-11-25T13:38:26Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:232"
2024-11-25T13:38:26Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:232"
2024-11-25T13:38:26Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:232"
2024-11-25T13:38:26Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:232"
2024-11-25T13:38:26Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:232"
2024-11-25T13:38:26Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-11-25T13:38:26Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-11-25T13:38:26Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-11-25T13:38:26Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-11-25T13:38:26Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-11-25T13:38:26Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-11-25T13:38:26Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-11-25T13:38:26Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-11-25T13:38:26Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-11-25T13:38:26Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-11-25T13:38:26Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-11-25T13:38:26Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-11-25T13:38:26Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-11-25T13:38:26Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-11-25T13:38:26Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-11-25T13:38:26Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-11-25T13:38:26Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-11-25T13:38:26Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-11-25T13:38:26Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-11-25T13:38:26Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-11-25T13:38:26Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-11-25T13:38:26Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-11-25T13:38:26Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-11-25T13:38:26Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-11-25T13:38:26Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-11-25T13:38:26Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-11-25T13:38:26Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-11-25T13:38:26Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-11-25T13:38:26Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-11-25T13:38:26Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-11-25T13:38:26Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-11-25T13:38:26Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-11-25T13:38:26Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:483"
2024-11-25T13:38:26Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:483"
2024-11-25T13:38:26Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:483"
2024-11-25T13:38:26Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:483"
2024-11-25T13:38:26Z INFO [terraform executor] Ignore finding rule="aws-cloudwatch-log-group-customer-key" range="../../modules/vpc-hub/main.tf:133-138"
2024-11-25T13:38:26Z INFO [terraform executor] Ignore finding rule="aws-cloudwatch-log-group-customer-key" range="../../modules/vpc-hub/main.tf:133-138"
2024-11-25T13:38:26Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:234"
2024-11-25T13:38:26Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:234"
2024-11-25T13:38:26Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:334"
2024-11-25T13:38:26Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:334"
2024-11-25T13:38:26Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:408"
2024-11-25T13:38:26Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:408"
2024-11-25T13:38:26Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:485"
2024-11-25T13:38:26Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:485"
2024-11-25T13:38:26Z INFO [terraform executor] Ignore finding rule="aws-lambda-enable-tracing" range="athena.tf:256-279"
2024-11-25T13:38:27Z INFO Number of language-specific files num=1
2024-11-25T13:38:27Z INFO [gomod] Detecting vulnerabilities...
2024-11-25T13:38:27Z INFO Detected config files num=9
trivy_exitcode=0

</details> #### `Checkov Scan` Success
<details><summary>Show Output</summary>

```hcl

*****************************

Checkov will check the following folders:
terraform/environments/core-logging

*****************************

Running Checkov in terraform/environments/core-logging
Excluding the following checks: CKV_GIT_1,CKV_AWS_126,CKV2_AWS_38,CKV2_AWS_39
2024-11-25 13:38:29,585 [MainThread  ] [WARNI]  Failed to download module github.com/ministryofjustice/terraform-aws-observability-platform-tenant?ref=fbbe5c8282786bcc0a00c969fe598e14f12eea9b:None (for external modules, the --download-external-modules flag is required)
2024-11-25 13:38:29,586 [MainThread  ] [WARNI]  Failed to download module github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=4e17731f72ef24b804207f55b182f49057e73ec9:None (for external modules, the --download-external-modules flag is required)
2024-11-25 13:38:29,586 [MainThread  ] [WARNI]  Failed to download module github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a:None (for external modules, the --download-external-modules flag is required)
2024-11-25 13:38:29,586 [MainThread  ] [WARNI]  Failed to download module github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=8688bc15a08fbf5a4f4eef9b7433c5a417df8df1:None (for external modules, the --download-external-modules flag is required)
2024-11-25 13:38:29,586 [MainThread  ] [WARNI]  Failed to download module github.com/ministryofjustice/modernisation-platform-terraform-aws-chatbot?ref=73280f80ce8a4557cec3a76ee56eb913452ca9aa:None (for external modules, the --download-external-modules flag is required)
terraform scan results:

Passed checks: 696, Failed checks: 0, Skipped checks: 220


checkov_exitcode=0

`CTFLint Scan` Success

Show Output

*****************************

Setting default tflint config...
Running tflint --init...
Installing "terraform" plugin...
Installed "terraform" (source: github.com/terraform-linters/tflint-ruleset-terraform, version: 0.9.1)
tflint will check the following folders:
terraform/environments/core-logging

*****************************

Running tflint in terraform/environments/core-logging
Excluding the following checks: terraform_unused_declarations
tflint_exitcode=0

`Trivy Scan` Success

Show Output

*****************************

Trivy will check the following folders:
terraform/environments/core-logging

*****************************

Running Trivy in terraform/environments/core-logging
2024-11-25T13:38:18Z	INFO	[vulndb] Need to update DB
2024-11-25T13:38:18Z	INFO	[vulndb] Downloading vulnerability DB...
2024-11-25T13:38:18Z	INFO	[vulndb] Downloading artifact...	repo="public.ecr.aws/aquasecurity/trivy-db:2"
2024-11-25T13:38:20Z	INFO	[vulndb] Artifact successfully downloaded	repo="public.ecr.aws/aquasecurity/trivy-db:2"
2024-11-25T13:38:20Z	INFO	[vuln] Vulnerability scanning is enabled
2024-11-25T13:38:20Z	INFO	[misconfig] Misconfiguration scanning is enabled
2024-11-25T13:38:20Z	INFO	[misconfig] Need to update the built-in checks
2024-11-25T13:38:20Z	INFO	[misconfig] Downloading the built-in checks...
2024-11-25T13:38:21Z	ERROR	[misconfig] Falling back to embedded checks	err="failed to download built-in policies: download error: OCI repository error: 1 error occurred:\n\t* GET https://ghcr.io/v2/aquasecurity/trivy-checks/manifests/1: TOOMANYREQUESTS: retry-after: 1.158177ms, allowed: 44000/minute\n\n"
2024-11-25T13:38:21Z	INFO	[secret] Secret scanning is enabled
2024-11-25T13:38:21Z	INFO	[secret] If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2024-11-25T13:38:21Z	INFO	[secret] Please see also https://aquasecurity.github.io/trivy/v0.57/docs/scanner/secret#recommendation for faster secret detection
2024-11-25T13:38:21Z	INFO	[terraform scanner] Scanning root module	file_path="."
2024-11-25T13:38:23Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.s3-bucket-cloudtrail.aws_s3_bucket_logging.default" value="cty.NilVal"
2024-11-25T13:38:23Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc[\"live_data\"].aws_subnet.data" value="cty.NilVal"
2024-11-25T13:38:23Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc[\"live_data\"].aws_subnet.private" value="cty.NilVal"
2024-11-25T13:38:23Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc[\"live_data\"].aws_subnet.public" value="cty.NilVal"
2024-11-25T13:38:23Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc[\"live_data\"].aws_subnet.transit-gateway" value="cty.NilVal"
2024-11-25T13:38:23Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc[\"live_data\"].aws_eip.public" value="cty.NilVal"
2024-11-25T13:38:23Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc[\"live_data\"].aws_nat_gateway.public" value="cty.NilVal"
2024-11-25T13:38:23Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc[\"live_data\"].aws_route.data-tgw" value="cty.NilVal"
2024-11-25T13:38:23Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc[\"live_data\"].aws_route.private-tgw" value="cty.NilVal"
2024-11-25T13:38:23Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc[\"non_live_data\"].aws_subnet.data" value="cty.NilVal"
2024-11-25T13:38:23Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc[\"non_live_data\"].aws_subnet.private" value="cty.NilVal"
2024-11-25T13:38:23Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc[\"non_live_data\"].aws_subnet.public" value="cty.NilVal"
2024-11-25T13:38:23Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc[\"non_live_data\"].aws_subnet.transit-gateway" value="cty.NilVal"
2024-11-25T13:38:23Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc[\"non_live_data\"].aws_eip.public" value="cty.NilVal"
2024-11-25T13:38:23Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc[\"non_live_data\"].aws_nat_gateway.public" value="cty.NilVal"
2024-11-25T13:38:23Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc[\"non_live_data\"].aws_route.data-tgw" value="cty.NilVal"
2024-11-25T13:38:23Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc[\"non_live_data\"].aws_route.private-tgw" value="cty.NilVal"
2024-11-25T13:38:26Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:232"
2024-11-25T13:38:26Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:232"
2024-11-25T13:38:26Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:232"
2024-11-25T13:38:26Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:232"
2024-11-25T13:38:26Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:232"
2024-11-25T13:38:26Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:232"
2024-11-25T13:38:26Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-11-25T13:38:26Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-11-25T13:38:26Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-11-25T13:38:26Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-11-25T13:38:26Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-11-25T13:38:26Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-11-25T13:38:26Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-11-25T13:38:26Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-11-25T13:38:26Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-11-25T13:38:26Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-11-25T13:38:26Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-11-25T13:38:26Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-11-25T13:38:26Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-11-25T13:38:26Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-11-25T13:38:26Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-11-25T13:38:26Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-11-25T13:38:26Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-11-25T13:38:26Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-11-25T13:38:26Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-11-25T13:38:26Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-11-25T13:38:26Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-11-25T13:38:26Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-11-25T13:38:26Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-11-25T13:38:26Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-11-25T13:38:26Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-11-25T13:38:26Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-11-25T13:38:26Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-11-25T13:38:26Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-11-25T13:38:26Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-11-25T13:38:26Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-11-25T13:38:26Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-11-25T13:38:26Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-11-25T13:38:26Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:483"
2024-11-25T13:38:26Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:483"
2024-11-25T13:38:26Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:483"
2024-11-25T13:38:26Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:483"
2024-11-25T13:38:26Z	INFO	[terraform executor] Ignore finding	rule="aws-cloudwatch-log-group-customer-key" range="../../modules/vpc-hub/main.tf:133-138"
2024-11-25T13:38:26Z	INFO	[terraform executor] Ignore finding	rule="aws-cloudwatch-log-group-customer-key" range="../../modules/vpc-hub/main.tf:133-138"
2024-11-25T13:38:26Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:234"
2024-11-25T13:38:26Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:234"
2024-11-25T13:38:26Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:334"
2024-11-25T13:38:26Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:334"
2024-11-25T13:38:26Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:408"
2024-11-25T13:38:26Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:408"
2024-11-25T13:38:26Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:485"
2024-11-25T13:38:26Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:485"
2024-11-25T13:38:26Z	INFO	[terraform executor] Ignore finding	rule="aws-lambda-enable-tracing" range="athena.tf:256-279"
2024-11-25T13:38:27Z	INFO	Number of language-specific files	num=1
2024-11-25T13:38:27Z	INFO	[gomod] Detecting vulnerabilities...
2024-11-25T13:38:27Z	INFO	Detected config files	num=9
trivy_exitcode=0

github-actions · 2024-11-25T13:43:09Z

`Trivy Scan` Success

Show Output

```hcl

Trivy will check the following folders:
terraform/environments/core-logging

Running Trivy in terraform/environments/core-logging
2024-11-25T13:42:50Z INFO [vulndb] Need to update DB
2024-11-25T13:42:50Z INFO [vulndb] Downloading vulnerability DB...
2024-11-25T13:42:50Z INFO [vulndb] Downloading artifact... repo="public.ecr.aws/aquasecurity/trivy-db:2"
2024-11-25T13:42:53Z INFO [vulndb] Artifact successfully downloaded repo="public.ecr.aws/aquasecurity/trivy-db:2"
2024-11-25T13:42:53Z INFO [vuln] Vulnerability scanning is enabled
2024-11-25T13:42:53Z INFO [misconfig] Misconfiguration scanning is enabled
2024-11-25T13:42:53Z INFO [misconfig] Need to update the built-in checks
2024-11-25T13:42:53Z INFO [misconfig] Downloading the built-in checks...
2024-11-25T13:42:53Z ERROR [misconfig] Falling back to embedded checks err="failed to download built-in policies: download error: OCI repository error: 1 error occurred:\n\t* GET https://ghcr.io/v2/aquasecurity/trivy-checks/manifests/1: TOOMANYREQUESTS: retry-after: 848.68µs, allowed: 44000/minute\n\n"
2024-11-25T13:42:53Z INFO [secret] Secret scanning is enabled
2024-11-25T13:42:53Z INFO [secret] If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2024-11-25T13:42:53Z INFO [secret] Please see also https://aquasecurity.github.io/trivy/v0.57/docs/scanner/secret#recommendation for faster secret detection
2024-11-25T13:42:55Z INFO [terraform scanner] Scanning root module file_path="."
2024-11-25T13:42:58Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.s3-bucket-cloudtrail.aws_s3_bucket_logging.default" value="cty.NilVal"
2024-11-25T13:42:58Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc["live_data"].aws_subnet.data" value="cty.NilVal"
2024-11-25T13:42:58Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc["live_data"].aws_subnet.private" value="cty.NilVal"
2024-11-25T13:42:58Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc["live_data"].aws_subnet.public" value="cty.NilVal"
2024-11-25T13:42:58Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc["live_data"].aws_subnet.transit-gateway" value="cty.NilVal"
2024-11-25T13:42:58Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc["live_data"].aws_eip.public" value="cty.NilVal"
2024-11-25T13:42:58Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc["live_data"].aws_nat_gateway.public" value="cty.NilVal"
2024-11-25T13:42:58Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc["live_data"].aws_route.data-tgw" value="cty.NilVal"
2024-11-25T13:42:58Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc["live_data"].aws_route.private-tgw" value="cty.NilVal"
2024-11-25T13:42:58Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc["non_live_data"].aws_subnet.data" value="cty.NilVal"
2024-11-25T13:42:58Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc["non_live_data"].aws_subnet.private" value="cty.NilVal"
2024-11-25T13:42:58Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc["non_live_data"].aws_subnet.public" value="cty.NilVal"
2024-11-25T13:42:58Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc["non_live_data"].aws_subnet.transit-gateway" value="cty.NilVal"
2024-11-25T13:42:58Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc["non_live_data"].aws_eip.public" value="cty.NilVal"
2024-11-25T13:42:58Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc["non_live_data"].aws_nat_gateway.public" value="cty.NilVal"
2024-11-25T13:42:58Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc["non_live_data"].aws_route.data-tgw" value="cty.NilVal"
2024-11-25T13:42:58Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc["non_live_data"].aws_route.private-tgw" value="cty.NilVal"
2024-11-25T13:43:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:232"
2024-11-25T13:43:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:232"
2024-11-25T13:43:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:232"
2024-11-25T13:43:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:232"
2024-11-25T13:43:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:232"
2024-11-25T13:43:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:232"
2024-11-25T13:43:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-11-25T13:43:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-11-25T13:43:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-11-25T13:43:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-11-25T13:43:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-11-25T13:43:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-11-25T13:43:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-11-25T13:43:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-11-25T13:43:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-11-25T13:43:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-11-25T13:43:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-11-25T13:43:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-11-25T13:43:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-11-25T13:43:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-11-25T13:43:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-11-25T13:43:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-11-25T13:43:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-11-25T13:43:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-11-25T13:43:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-11-25T13:43:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-11-25T13:43:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-11-25T13:43:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-11-25T13:43:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-11-25T13:43:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-11-25T13:43:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-11-25T13:43:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-11-25T13:43:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-11-25T13:43:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-11-25T13:43:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-11-25T13:43:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-11-25T13:43:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-11-25T13:43:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-11-25T13:43:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:483"
2024-11-25T13:43:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:483"
2024-11-25T13:43:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:483"
2024-11-25T13:43:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:483"
2024-11-25T13:43:01Z INFO [terraform executor] Ignore finding rule="aws-cloudwatch-log-group-customer-key" range="../../modules/vpc-hub/main.tf:133-138"
2024-11-25T13:43:01Z INFO [terraform executor] Ignore finding rule="aws-cloudwatch-log-group-customer-key" range="../../modules/vpc-hub/main.tf:133-138"
2024-11-25T13:43:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:234"
2024-11-25T13:43:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:234"
2024-11-25T13:43:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:334"
2024-11-25T13:43:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:334"
2024-11-25T13:43:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:408"
2024-11-25T13:43:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:408"
2024-11-25T13:43:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:485"
2024-11-25T13:43:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:485"
2024-11-25T13:43:01Z INFO [terraform executor] Ignore finding rule="aws-lambda-enable-tracing" range="athena.tf:256-279"
2024-11-25T13:43:01Z INFO Number of language-specific files num=1
2024-11-25T13:43:01Z INFO [gomod] Detecting vulnerabilities...
2024-11-25T13:43:01Z INFO Detected config files num=9
trivy_exitcode=0

</details> #### `Checkov Scan` Success
<details><summary>Show Output</summary>

```hcl

*****************************

Checkov will check the following folders:
terraform/environments/core-logging

*****************************

Running Checkov in terraform/environments/core-logging
Excluding the following checks: CKV_GIT_1,CKV_AWS_126,CKV2_AWS_38,CKV2_AWS_39
2024-11-25 13:43:04,630 [MainThread  ] [WARNI]  Failed to download module github.com/ministryofjustice/terraform-aws-observability-platform-tenant?ref=fbbe5c8282786bcc0a00c969fe598e14f12eea9b:None (for external modules, the --download-external-modules flag is required)
2024-11-25 13:43:04,631 [MainThread  ] [WARNI]  Failed to download module github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=4e17731f72ef24b804207f55b182f49057e73ec9:None (for external modules, the --download-external-modules flag is required)
2024-11-25 13:43:04,631 [MainThread  ] [WARNI]  Failed to download module github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a:None (for external modules, the --download-external-modules flag is required)
2024-11-25 13:43:04,631 [MainThread  ] [WARNI]  Failed to download module github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=8688bc15a08fbf5a4f4eef9b7433c5a417df8df1:None (for external modules, the --download-external-modules flag is required)
2024-11-25 13:43:04,631 [MainThread  ] [WARNI]  Failed to download module github.com/ministryofjustice/modernisation-platform-terraform-aws-chatbot?ref=73280f80ce8a4557cec3a76ee56eb913452ca9aa:None (for external modules, the --download-external-modules flag is required)
terraform scan results:

Passed checks: 696, Failed checks: 0, Skipped checks: 220


checkov_exitcode=0

`CTFLint Scan` Success

Show Output

*****************************

Setting default tflint config...
Running tflint --init...
Installing "terraform" plugin...
Installed "terraform" (source: github.com/terraform-linters/tflint-ruleset-terraform, version: 0.9.1)
tflint will check the following folders:
terraform/environments/core-logging

*****************************

Running tflint in terraform/environments/core-logging
Excluding the following checks: terraform_unused_declarations
tflint_exitcode=0

`Trivy Scan` Success

Show Output

*****************************

Trivy will check the following folders:
terraform/environments/core-logging

*****************************

Running Trivy in terraform/environments/core-logging
2024-11-25T13:42:50Z	INFO	[vulndb] Need to update DB
2024-11-25T13:42:50Z	INFO	[vulndb] Downloading vulnerability DB...
2024-11-25T13:42:50Z	INFO	[vulndb] Downloading artifact...	repo="public.ecr.aws/aquasecurity/trivy-db:2"
2024-11-25T13:42:53Z	INFO	[vulndb] Artifact successfully downloaded	repo="public.ecr.aws/aquasecurity/trivy-db:2"
2024-11-25T13:42:53Z	INFO	[vuln] Vulnerability scanning is enabled
2024-11-25T13:42:53Z	INFO	[misconfig] Misconfiguration scanning is enabled
2024-11-25T13:42:53Z	INFO	[misconfig] Need to update the built-in checks
2024-11-25T13:42:53Z	INFO	[misconfig] Downloading the built-in checks...
2024-11-25T13:42:53Z	ERROR	[misconfig] Falling back to embedded checks	err="failed to download built-in policies: download error: OCI repository error: 1 error occurred:\n\t* GET https://ghcr.io/v2/aquasecurity/trivy-checks/manifests/1: TOOMANYREQUESTS: retry-after: 848.68µs, allowed: 44000/minute\n\n"
2024-11-25T13:42:53Z	INFO	[secret] Secret scanning is enabled
2024-11-25T13:42:53Z	INFO	[secret] If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2024-11-25T13:42:53Z	INFO	[secret] Please see also https://aquasecurity.github.io/trivy/v0.57/docs/scanner/secret#recommendation for faster secret detection
2024-11-25T13:42:55Z	INFO	[terraform scanner] Scanning root module	file_path="."
2024-11-25T13:42:58Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.s3-bucket-cloudtrail.aws_s3_bucket_logging.default" value="cty.NilVal"
2024-11-25T13:42:58Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc[\"live_data\"].aws_subnet.data" value="cty.NilVal"
2024-11-25T13:42:58Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc[\"live_data\"].aws_subnet.private" value="cty.NilVal"
2024-11-25T13:42:58Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc[\"live_data\"].aws_subnet.public" value="cty.NilVal"
2024-11-25T13:42:58Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc[\"live_data\"].aws_subnet.transit-gateway" value="cty.NilVal"
2024-11-25T13:42:58Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc[\"live_data\"].aws_eip.public" value="cty.NilVal"
2024-11-25T13:42:58Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc[\"live_data\"].aws_nat_gateway.public" value="cty.NilVal"
2024-11-25T13:42:58Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc[\"live_data\"].aws_route.data-tgw" value="cty.NilVal"
2024-11-25T13:42:58Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc[\"live_data\"].aws_route.private-tgw" value="cty.NilVal"
2024-11-25T13:42:58Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc[\"non_live_data\"].aws_subnet.data" value="cty.NilVal"
2024-11-25T13:42:58Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc[\"non_live_data\"].aws_subnet.private" value="cty.NilVal"
2024-11-25T13:42:58Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc[\"non_live_data\"].aws_subnet.public" value="cty.NilVal"
2024-11-25T13:42:58Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc[\"non_live_data\"].aws_subnet.transit-gateway" value="cty.NilVal"
2024-11-25T13:42:58Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc[\"non_live_data\"].aws_eip.public" value="cty.NilVal"
2024-11-25T13:42:58Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc[\"non_live_data\"].aws_nat_gateway.public" value="cty.NilVal"
2024-11-25T13:42:58Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc[\"non_live_data\"].aws_route.data-tgw" value="cty.NilVal"
2024-11-25T13:42:58Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc[\"non_live_data\"].aws_route.private-tgw" value="cty.NilVal"
2024-11-25T13:43:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:232"
2024-11-25T13:43:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:232"
2024-11-25T13:43:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:232"
2024-11-25T13:43:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:232"
2024-11-25T13:43:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:232"
2024-11-25T13:43:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:232"
2024-11-25T13:43:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-11-25T13:43:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-11-25T13:43:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-11-25T13:43:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-11-25T13:43:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-11-25T13:43:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-11-25T13:43:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-11-25T13:43:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-11-25T13:43:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-11-25T13:43:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-11-25T13:43:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-11-25T13:43:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-11-25T13:43:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-11-25T13:43:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-11-25T13:43:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-11-25T13:43:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-11-25T13:43:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-11-25T13:43:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-11-25T13:43:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-11-25T13:43:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-11-25T13:43:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-11-25T13:43:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-11-25T13:43:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-11-25T13:43:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-11-25T13:43:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-11-25T13:43:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-11-25T13:43:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-11-25T13:43:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-11-25T13:43:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-11-25T13:43:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-11-25T13:43:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-11-25T13:43:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-11-25T13:43:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:483"
2024-11-25T13:43:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:483"
2024-11-25T13:43:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:483"
2024-11-25T13:43:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:483"
2024-11-25T13:43:01Z	INFO	[terraform executor] Ignore finding	rule="aws-cloudwatch-log-group-customer-key" range="../../modules/vpc-hub/main.tf:133-138"
2024-11-25T13:43:01Z	INFO	[terraform executor] Ignore finding	rule="aws-cloudwatch-log-group-customer-key" range="../../modules/vpc-hub/main.tf:133-138"
2024-11-25T13:43:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:234"
2024-11-25T13:43:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:234"
2024-11-25T13:43:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:334"
2024-11-25T13:43:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:334"
2024-11-25T13:43:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:408"
2024-11-25T13:43:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:408"
2024-11-25T13:43:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:485"
2024-11-25T13:43:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:485"
2024-11-25T13:43:01Z	INFO	[terraform executor] Ignore finding	rule="aws-lambda-enable-tracing" range="athena.tf:256-279"
2024-11-25T13:43:01Z	INFO	Number of language-specific files	num=1
2024-11-25T13:43:01Z	INFO	[gomod] Detecting vulnerabilities...
2024-11-25T13:43:01Z	INFO	Detected config files	num=9
trivy_exitcode=0

Adds the low priority mod platform alerts channel id.

cb6936b

mikereiddigital requested a review from a team as a code owner November 25, 2024 13:35

github-actions bot added the core label Nov 25, 2024

Merge branch 'main' into issue/8248

e52ead4

Updated comments.

289b5ab

mikereiddigital mentioned this pull request Nov 25, 2024

Create alarms for Cortex SQS queues #8248

Closed

4 tasks

ASTRobinson approved these changes Nov 25, 2024

View reviewed changes

mikereiddigital added this pull request to the merge queue Nov 25, 2024

Merged via the queue into main with commit 6b6bcd6 Nov 25, 2024
5 checks passed

mikereiddigital deleted the issue/8248 branch November 25, 2024 13:51

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

issue/8248 #8586

issue/8248 #8586

mikereiddigital commented Nov 25, 2024 •

edited

Loading

github-actions bot commented Nov 25, 2024

github-actions bot commented Nov 25, 2024

issue/8248 #8586

issue/8248 #8586

Conversation

mikereiddigital commented Nov 25, 2024 • edited Loading

A reference to the issue / Description of it

How does this PR fix the problem?

How has this been tested?

Deployment Plan / Instructions

Checklist (check x in [ ] of list items)

Additional comments (if any)

github-actions bot commented Nov 25, 2024

Trivy Scan Success

CTFLint Scan Success

Trivy Scan Success

github-actions bot commented Nov 25, 2024

Trivy Scan Success

CTFLint Scan Success

Trivy Scan Success

mikereiddigital commented Nov 25, 2024 •

edited

Loading

Checklist (check `x` in `[ ]` of list items)

`Trivy Scan` Success

`CTFLint Scan` Success

`Trivy Scan` Success

`Trivy Scan` Success

`CTFLint Scan` Success

`Trivy Scan` Success