Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Use SSM parameter to retrieve bucket ARNs #8123

Merged
merged 1 commit into from
Sep 30, 2024
Merged

Use SSM parameter to retrieve bucket ARNs #8123

merged 1 commit into from
Sep 30, 2024

Conversation

dms1981
Copy link
Contributor

@dms1981 dms1981 commented Sep 30, 2024

A reference to the issue / Description of it

#7607

How does this PR fix the problem?

We originally used AWS Secretsmanager to store values centrally that could be used by core-* accounts. However, AWS SSM Parameter Store is the more appropriate way to hold these values. This PR updates how we retrieve values relevant to storing Cortex XSIAM information.

How has this been tested?

Tested through CI pipelines; no changes expected

Deployment Plan / Instructions

Deploy through CI

Checklist (check x in [ ] of list items)

  • I have performed a self-review of my own code
  • All checks have passed
  • I have made corresponding changes to the documentation
  • Plan and discussed how it should be deployed to PROD (If needed)

Additional comments (if any)

{Please write here}

@dms1981
replace references to secretsmanager value with ssm insecure value, u…
98c7b4f 
…pdate name of local to better reflect purpose
@dms1981 dms1981 requested a review from a team as a code owner September 30, 2024 15:47
@github-actions GitHub Actions
Copy link
Contributor

Trivy Scan Success

Show Output ```hcl

Trivy will check the following folders:
terraform/environments/core-logging
terraform/environments/core-network-services
terraform/environments/core-security
terraform/environments/core-shared-services
terraform/environments/core-vpc

Running Trivy in terraform/environments/core-logging
2024-09-30T15:49:56Z INFO [db] Need to update DB
2024-09-30T15:49:56Z INFO [db] Downloading DB... repository="ghcr.io/aquasecurity/trivy-db:2"
2024-09-30T15:49:58Z INFO [vuln] Vulnerability scanning is enabled
2024-09-30T15:49:58Z INFO [misconfig] Misconfiguration scanning is enabled
2024-09-30T15:49:58Z INFO Need to update the built-in policies
2024-09-30T15:49:58Z INFO Downloading the built-in policies...
74.86 KiB / 74.86 KiB [-----------------------------------------------------------] 100.00% ? p/s 0s2024-09-30T15:49:59Z INFO [secret] Secret scanning is enabled
2024-09-30T15:49:59Z INFO [secret] If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2024-09-30T15:49:59Z INFO [secret] Please see also https://aquasecurity.github.io/trivy/v0.55/docs/scanner/secret#recommendation for faster secret detection
2024-09-30T15:50:00Z INFO [terraform scanner] Scanning root module file_path="."
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.s3-bucket-athena.dynamic.expiration" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.s3-bucket-athena.dynamic.transition" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.s3-bucket-athena.dynamic.noncurrent_version_expiration" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.s3-bucket-athena.dynamic.noncurrent_version_transition" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.s3-bucket-athena.dynamic.principals" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.s3-bucket-athena.dynamic.condition" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.s3-bucket-athena.dynamic.expiration" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.s3-bucket-athena.dynamic.transition" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.s3-bucket-athena.dynamic.noncurrent_version_expiration" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.s3-bucket-athena.dynamic.noncurrent_version_transition" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.s3-bucket-athena.dynamic.principals" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.s3-bucket-athena.dynamic.condition" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.s3-bucket-cloudtrail.aws_s3_bucket_logging.default" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.s3-bucket-cloudtrail.dynamic.expiration" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.s3-bucket-cloudtrail.dynamic.transition" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.s3-bucket-cloudtrail.dynamic.noncurrent_version_expiration" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.s3-bucket-cloudtrail.dynamic.noncurrent_version_transition" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.s3-bucket-cloudtrail.dynamic.principals" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.s3-bucket-cloudtrail.dynamic.condition" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.s3-bucket-cloudtrail.dynamic.expiration" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.s3-bucket-cloudtrail.dynamic.transition" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.s3-bucket-cloudtrail.dynamic.noncurrent_version_expiration" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.s3-bucket-cloudtrail.dynamic.noncurrent_version_transition" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.s3-bucket-cloudtrail.dynamic.principals" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.s3-bucket-cloudtrail.dynamic.condition" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.s3-bucket-cloudtrail-logging.dynamic.expiration" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.s3-bucket-cloudtrail-logging.dynamic.transition" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.s3-bucket-cloudtrail-logging.dynamic.noncurrent_version_expiration" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.s3-bucket-cloudtrail-logging.dynamic.noncurrent_version_transition" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.s3-bucket-cloudtrail-logging.dynamic.principals" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.s3-bucket-cloudtrail-logging.dynamic.condition" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.s3-bucket-cloudtrail-logging.dynamic.expiration" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.s3-bucket-cloudtrail-logging.dynamic.transition" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.s3-bucket-cloudtrail-logging.dynamic.noncurrent_version_expiration" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.s3-bucket-cloudtrail-logging.dynamic.noncurrent_version_transition" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.s3-bucket-cloudtrail-logging.dynamic.principals" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.s3-bucket-cloudtrail-logging.dynamic.condition" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.s3-bucket-cloudtrail.dynamic.expiration" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.s3-bucket-cloudtrail.dynamic.transition" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.s3-bucket-cloudtrail.dynamic.noncurrent_version_expiration" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.s3-bucket-cloudtrail.dynamic.noncurrent_version_transition" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.s3-bucket-cloudtrail.dynamic.principals" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.s3-bucket-cloudtrail.dynamic.condition" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.s3-bucket-cloudtrail.dynamic.expiration" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.s3-bucket-cloudtrail.dynamic.transition" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.s3-bucket-cloudtrail.dynamic.noncurrent_version_expiration" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.s3-bucket-cloudtrail.dynamic.noncurrent_version_transition" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.s3-bucket-cloudtrail.dynamic.principals" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.s3-bucket-cloudtrail.dynamic.condition" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.s3-grafana-athena-query-results.dynamic.expiration" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.s3-grafana-athena-query-results.dynamic.transition" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.s3-grafana-athena-query-results.dynamic.noncurrent_version_expiration" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.s3-grafana-athena-query-results.dynamic.noncurrent_version_transition" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.s3-grafana-athena-query-results.dynamic.principals" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.s3-grafana-athena-query-results.dynamic.condition" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.s3-grafana-athena-query-results.dynamic.expiration" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.s3-grafana-athena-query-results.dynamic.transition" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.s3-grafana-athena-query-results.dynamic.noncurrent_version_expiration" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.s3-grafana-athena-query-results.dynamic.noncurrent_version_transition" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.s3-grafana-athena-query-results.dynamic.principals" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.s3-grafana-athena-query-results.dynamic.condition" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc["live_data"].aws_subnet.data" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc["live_data"].aws_subnet.private" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc["live_data"].aws_subnet.public" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc["live_data"].aws_subnet.transit-gateway" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc["live_data"].aws_eip.public" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc["live_data"].aws_nat_gateway.public" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc["live_data"].aws_route.data-tgw" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc["live_data"].aws_route.private-tgw" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc["non_live_data"].aws_subnet.data" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc["non_live_data"].aws_subnet.private" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc["non_live_data"].aws_subnet.public" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc["non_live_data"].aws_subnet.transit-gateway" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc["non_live_data"].aws_eip.public" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc["non_live_data"].aws_nat_gateway.public" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc["non_live_data"].aws_route.data-tgw" value="cty.NilVal"
2024-09-30T15:50:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc["non_live_data"].aws_route.private-tgw" value="cty.NilVal"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:232"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:224-237"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:224-237"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:224-237"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:232"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:232"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:224-237"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:483"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:483"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:232"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:224-237"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:224-237"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:224-237"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:232"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:232"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:224-237"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:483"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:483"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:48"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:48"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-lambda-enable-tracing" range="athena.tf:256-279"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-s3-enable-bucket-encryption" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=8688bc15a08fbf5a4f4eef9b7433c5a417df8df1/main.tf:8-19"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-s3-enable-bucket-encryption" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/main.tf:16-27"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-s3-enable-bucket-encryption" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/main.tf:16-27"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-s3-enable-bucket-encryption" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=4e17731f72ef24b804207f55b182f49057e73ec9/main.tf:16-27"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-s3-enable-versioning" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=8688bc15a08fbf5a4f4eef9b7433c5a417df8df1/main.tf:8-19"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-s3-enable-versioning" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/main.tf:16-27"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-s3-enable-versioning" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/main.tf:16-27"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-s3-enable-versioning" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=4e17731f72ef24b804207f55b182f49057e73ec9/main.tf:16-27"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-s3-encryption-customer-key" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=8688bc15a08fbf5a4f4eef9b7433c5a417df8df1/main.tf:8-19"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-s3-encryption-customer-key" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/main.tf:16-27"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-s3-encryption-customer-key" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=4e17731f72ef24b804207f55b182f49057e73ec9/main.tf:150-160"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-cloudwatch-log-group-customer-key" range="../../modules/vpc-hub/main.tf:133-138"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-cloudwatch-log-group-customer-key" range="../../modules/vpc-hub/main.tf:133-138"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:408"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:334"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:234"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:234"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:234"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:224-237"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:485"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:408"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:334"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:234"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:234"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:234"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:224-237"
2024-09-30T15:50:01Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:485"
2024-09-30T15:50:01Z INFO Number of language-specific files num=1
2024-09-30T15:50:01Z INFO [gomod] Detecting vulnerabilities...
2024-09-30T15:50:01Z INFO Detected config files num=13
trivy_exitcode=0

Running Trivy in terraform/environments/core-network-services
2024-09-30T15:50:02Z INFO [vuln] Vulnerability scanning is enabled
2024-09-30T15:50:02Z INFO [misconfig] Misconfiguration scanning is enabled
2024-09-30T15:50:02Z INFO [secret] Secret scanning is enabled
2024-09-30T15:50:02Z INFO [secret] If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2024-09-30T15:50:02Z INFO [secret] Please see also https://aquasecurity.github.io/trivy/v0.55/docs/scanner/secret#recommendation for faster secret detection
2024-09-30T15:50:03Z INFO [terraform scanner] Scanning root module file_path="."
2024-09-30T15:50:03Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="aws_cloudwatch_metric_alarm.nat_packets_drop_count" value="cty.NilVal"
2024-09-30T15:50:03Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="aws_ec2_transit_gateway_route_table_propagation.propagate_live_data_vpcs" value="cty.NilVal"
2024-09-30T15:50:03Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="aws_ec2_transit_gateway_route_table_propagation.propagate_noms_routes_to_firewall" value="cty.NilVal"
2024-09-30T15:50:03Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="aws_ec2_transit_gateway_route_table_propagation.propagate_non_live_data_vpcs" value="cty.NilVal"
2024-09-30T15:50:03Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="aws_route_table.external_inspection_in" value="cty.NilVal"
2024-09-30T15:50:03Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="aws_route_table_association.external_inspection_in" value="cty.NilVal"
2024-09-30T15:50:03Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="aws_route_table_association.external_inspection_out" value="cty.NilVal"
2024-09-30T15:50:03Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="aws_subnet.external_inspection_in" value="cty.NilVal"
2024-09-30T15:50:03Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="aws_subnet.external_inspection_out" value="cty.NilVal"
2024-09-30T15:50:03Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="data.aws_ec2_transit_gateway_vpc_attachment.transit_gateway_all" value="cty.NilVal"
2024-09-30T15:50:03Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="data.aws_route.live_data" value="cty.NilVal"
2024-09-30T15:50:03Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="data.aws_route.non_live_data" value="cty.NilVal"
2024-09-30T15:50:03Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="aws_ec2_transit_gateway_route_table_propagation.propagate_firewall" value="cty.NilVal"
2024-09-30T15:50:03Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.firewall_policy.dynamic.ip_sets" value="cty.NilVal"
2024-09-30T15:50:03Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.firewall_policy.dynamic.port_sets" value="cty.NilVal"
2024-09-30T15:50:03Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.firewall_policy.dynamic.ip_sets" value="cty.NilVal"
2024-09-30T15:50:03Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.firewall_policy.dynamic.port_sets" value="cty.NilVal"
2024-09-30T15:50:04Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc_inspection["live_data"].aws_flow_log.s3" value="cty.NilVal"
2024-09-30T15:50:04Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc_inspection["live_data"].aws_subnet.inspection" value="cty.NilVal"
2024-09-30T15:50:04Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc_inspection["live_data"].aws_subnet.public" value="cty.NilVal"
2024-09-30T15:50:04Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc_inspection["live_data"].aws_subnet.transit-gateway" value="cty.NilVal"
2024-09-30T15:50:04Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc_inspection["live_data"].aws_route.inspection-0-0-0-0" value="cty.NilVal"
2024-09-30T15:50:04Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc_inspection["live_data"].aws_route.inspection-10-20-0-0" value="cty.NilVal"
2024-09-30T15:50:04Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc_inspection["live_data"].aws_route.inspection-10-231-0-0" value="cty.NilVal"
2024-09-30T15:50:04Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc_inspection["live_data"].aws_route.inspection-10-26-0-0" value="cty.NilVal"
2024-09-30T15:50:04Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc_inspection["live_data"].aws_route.inspection-10-27-0-0" value="cty.NilVal"
2024-09-30T15:50:04Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc_inspection["live_data"].aws_route.public-0-0-0-0" value="cty.NilVal"
2024-09-30T15:50:04Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc_inspection["live_data"].aws_route.public-10-20-0-0" value="cty.NilVal"
2024-09-30T15:50:04Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc_inspection["live_data"].aws_route.public-10-231-0-0" value="cty.NilVal"
2024-09-30T15:50:04Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc_inspection["live_data"].aws_route.public-10-26-0-0" value="cty.NilVal"
2024-09-30T15:50:04Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc_inspection["live_data"].aws_route.public-10-27-0-0" value="cty.NilVal"
2024-09-30T15:50:04Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc_inspection["non_live_data"].aws_subnet.inspection" value="cty.NilVal"
2024-09-30T15:50:04Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc_inspection["non_live_data"].aws_subnet.public" value="cty.NilVal"
2024-09-30T15:50:04Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc_inspection["non_live_data"].aws_subnet.transit-gateway" value="cty.NilVal"
2024-09-30T15:50:04Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc_inspection["non_live_data"].aws_route.inspection-0-0-0-0" value="cty.NilVal"
2024-09-30T15:50:04Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc_inspection["non_live_data"].aws_route.inspection-10-20-0-0" value="cty.NilVal"
2024-09-30T15:50:04Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc_inspection["non_live_data"].aws_route.inspection-10-231-0-0" value="cty.NilVal"
2024-09-30T15:50:04Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc_inspection["non_live_data"].aws_route.inspection-10-26-0-0" value="cty.NilVal"
2024-09-30T15:50:04Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc_inspection["non_live_data"].aws_route.inspection-10-27-0-0" value="cty.NilVal"
2024-09-30T15:50:04Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc_inspection["non_live_data"].aws_route.public-0-0-0-0" value="cty.NilVal"
2024-09-30T15:50:04Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc_inspection["non_live_data"].aws_route.public-10-20-0-0" value="cty.NilVal"
2024-09-30T15:50:04Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc_inspection["non_live_data"].aws_route.public-10-231-0-0" value="cty.NilVal"
2024-09-30T15:50:04Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc_inspection["non_live_data"].aws_route.public-10-26-0-0" value="cty.NilVal"
2024-09-30T15:50:04Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc_inspection["non_live_data"].aws_route.public-10-27-0-0" value="cty.NilVal"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-inspection/main.tf:280"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-inspection/main.tf:267-283"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-inspection/main.tf:378"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-inspection/main.tf:365-381"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-inspection/main.tf:186"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-inspection/main.tf:173-189"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-inspection/main.tf:280"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-inspection/main.tf:267-283"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-inspection/main.tf:378"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-inspection/main.tf:365-381"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-inspection/main.tf:186"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-inspection/main.tf:173-189"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-cloudwatch-log-group-customer-key" range="../../modules/firewall-logging/main.tf:21-26"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-cloudwatch-log-group-customer-key" range="../../modules/firewall-logging/main.tf:21-26"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-cloudwatch-log-group-customer-key" range="../../modules/firewall-logging/main.tf:21-26"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-inspection/main.tf:278"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-inspection/main.tf:278"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-inspection/main.tf:278"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-inspection/main.tf:278"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-inspection/main.tf:376"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-inspection/main.tf:376"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-inspection/main.tf:376"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-inspection/main.tf:376"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-inspection/main.tf:184"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-inspection/main.tf:184"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-inspection/main.tf:184"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-inspection/main.tf:184"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-inspection/main.tf:278"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-inspection/main.tf:278"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-inspection/main.tf:278"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-inspection/main.tf:278"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-inspection/main.tf:376"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-inspection/main.tf:376"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-inspection/main.tf:376"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-inspection/main.tf:376"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-inspection/main.tf:184"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-inspection/main.tf:184"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-inspection/main.tf:184"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-inspection/main.tf:184"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:48"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:118"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:118"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:118"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:117-142"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:117-142"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:117-142"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:117-142"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:117-142"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:117-142"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:117-142"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:117-142"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:117-142"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:117-142"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:117-142"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:117-142"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:117-142"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:117-142"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:117-142"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:117-142"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:184"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:184"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:184"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:48"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-s3-block-public-acls" range="acm-pca.tf:14-31"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-s3-enable-bucket-encryption" range="acm-pca.tf:14-31"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-s3-enable-versioning" range="acm-pca.tf:14-31"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-s3-encryption-customer-key" range="acm-pca.tf:14-31"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-sns-enable-topic-encryption" range="monitoring.tf:189-193"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-sns-enable-topic-encryption" range="monitoring.tf:11-17"
2024-09-30T15:50:04Z INFO [terraform executor] Ignore finding rule="aws-sns-enable-topic-encryption" range="monitoring.tf:124-129"
2024-09-30T15:50:04Z INFO Number of language-specific files num=1
2024-09-30T15:50:04Z INFO [gomod] Detecting vulnerabilities...
2024-09-30T15:50:04Z INFO Detected config files num=9
trivy_exitcode=0

Running Trivy in terraform/environments/core-security
2024-09-30T15:50:04Z INFO [vuln] Vulnerability scanning is enabled
2024-09-30T15:50:04Z INFO [misconfig] Misconfiguration scanning is enabled
2024-09-30T15:50:04Z INFO [secret] Secret scanning is enabled
2024-09-30T15:50:04Z INFO [secret] If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2024-09-30T15:50:04Z INFO [secret] Please see also https://aquasecurity.github.io/trivy/v0.55/docs/scanner/secret#recommendation for faster secret detection
2024-09-30T15:50:05Z INFO [terraform scanner] Scanning root module file_path="."
2024-09-30T15:50:05Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc["live_data"].aws_flow_log.s3" value="cty.NilVal"
2024-09-30T15:50:05Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc["live_data"].aws_subnet.data" value="cty.NilVal"
2024-09-30T15:50:05Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc["live_data"].aws_subnet.private" value="cty.NilVal"
2024-09-30T15:50:05Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc["live_data"].aws_subnet.public" value="cty.NilVal"
2024-09-30T15:50:05Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc["live_data"].aws_subnet.transit-gateway" value="cty.NilVal"
2024-09-30T15:50:05Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc["live_data"].aws_eip.public" value="cty.NilVal"
2024-09-30T15:50:05Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc["live_data"].aws_nat_gateway.public" value="cty.NilVal"
2024-09-30T15:50:05Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc["live_data"].aws_route.data-tgw" value="cty.NilVal"
2024-09-30T15:50:05Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc["live_data"].aws_route.private-tgw" value="cty.NilVal"
2024-09-30T15:50:05Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc["non_live_data"].aws_subnet.data" value="cty.NilVal"
2024-09-30T15:50:05Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc["non_live_data"].aws_subnet.private" value="cty.NilVal"
2024-09-30T15:50:05Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc["non_live_data"].aws_subnet.public" value="cty.NilVal"
2024-09-30T15:50:05Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc["non_live_data"].aws_subnet.transit-gateway" value="cty.NilVal"
2024-09-30T15:50:05Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc["non_live_data"].aws_eip.public" value="cty.NilVal"
2024-09-30T15:50:05Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc["non_live_data"].aws_nat_gateway.public" value="cty.NilVal"
2024-09-30T15:50:05Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc["non_live_data"].aws_route.data-tgw" value="cty.NilVal"
2024-09-30T15:50:05Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc["non_live_data"].aws_route.private-tgw" value="cty.NilVal"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:408"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:334"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:234"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:234"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:234"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:224-237"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:485"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:408"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:334"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:234"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:234"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:234"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:224-237"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:485"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-cloudwatch-log-group-customer-key" range="../../modules/vpc-hub/main.tf:133-138"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-cloudwatch-log-group-customer-key" range="../../modules/vpc-hub/main.tf:133-138"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:232"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:224-237"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:224-237"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:224-237"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:232"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:232"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:224-237"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:483"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:483"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:232"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:224-237"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:224-237"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:224-237"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:232"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:232"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:224-237"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:483"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:483"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:48"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:05Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:48"
2024-09-30T15:50:06Z INFO Number of language-specific files num=1
2024-09-30T15:50:06Z INFO [gomod] Detecting vulnerabilities...
2024-09-30T15:50:06Z INFO Detected config files num=3
trivy_exitcode=0

Running Trivy in terraform/environments/core-shared-services
2024-09-30T15:50:06Z INFO [vuln] Vulnerability scanning is enabled
2024-09-30T15:50:06Z INFO [misconfig] Misconfiguration scanning is enabled
2024-09-30T15:50:06Z INFO [secret] Secret scanning is enabled
2024-09-30T15:50:06Z INFO [secret] If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2024-09-30T15:50:06Z INFO [secret] Please see also https://aquasecurity.github.io/trivy/v0.55/docs/scanner/secret#recommendation for faster secret detection
2024-09-30T15:50:08Z INFO [terraform scanner] Scanning root module file_path="."
2024-09-30T15:50:08Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="aws_subnet.live-data-additional" value="cty.NilVal"
2024-09-30T15:50:08Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="aws_security_group.image_builder_security_group" value="cty.NilVal"
2024-09-30T15:50:08Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="aws_security_group.interface_endpoint_security_group" value="cty.NilVal"
2024-09-30T15:50:08Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="aws_security_group_rule.image_builder_egress_443" value="cty.NilVal"
2024-09-30T15:50:08Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="aws_security_group_rule.image_builder_egress_80" value="cty.NilVal"
2024-09-30T15:50:08Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="aws_security_group_rule.interface_endpoint-security_group_rule" value="cty.NilVal"
2024-09-30T15:50:08Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="dynamic.ephemeral_block_device" value="cty.NilVal"
2024-09-30T15:50:08Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="dynamic.ephemeral_block_device" value="cty.NilVal"
2024-09-30T15:50:08Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="dynamic.ephemeral_block_device" value="cty.NilVal"
2024-09-30T15:50:08Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="dynamic.ephemeral_block_device" value="cty.NilVal"
2024-09-30T15:50:08Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="dynamic.ip_address" value="cty.NilVal"
2024-09-30T15:50:08Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="dynamic.ip_address" value="cty.NilVal"
2024-09-30T15:50:08Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="dynamic.target_ip" value="cty.NilVal"
2024-09-30T15:50:08Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="dynamic.target_ip" value="cty.NilVal"
2024-09-30T15:50:08Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="dynamic.target_ip" value="cty.NilVal"
2024-09-30T15:50:08Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="dynamic.ephemeral_block_device" value="cty.NilVal"
2024-09-30T15:50:08Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="dynamic.ephemeral_block_device" value="cty.NilVal"
2024-09-30T15:50:08Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="dynamic.ephemeral_block_device" value="cty.NilVal"
2024-09-30T15:50:08Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="dynamic.ephemeral_block_device" value="cty.NilVal"
2024-09-30T15:50:08Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="dynamic.ip_address" value="cty.NilVal"
2024-09-30T15:50:08Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="dynamic.ip_address" value="cty.NilVal"
2024-09-30T15:50:08Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="dynamic.target_ip" value="cty.NilVal"
2024-09-30T15:50:08Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="dynamic.target_ip" value="cty.NilVal"
2024-09-30T15:50:08Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="dynamic.target_ip" value="cty.NilVal"
2024-09-30T15:50:18Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open terraform/modules/ip_addresses: no such file or directory"
2024-09-30T15:50:22Z INFO [terraform scanner] Scanning root module file_path="test/test_terraform"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-ingress-acl" range="vpc_additional_cidr.tf:143"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:270-285"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:275"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:270-285"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:282"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:48"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:126-138"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:127"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:127"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:48"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-sns-enable-topic-encryption" range="instance-scheduler-lambda-function.tf:84-87"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-sns-enable-topic-encryption" range="instance-scheduler-lambda-function.tf:90-93"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="vpc_additional_cidr.tf:142-151"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="vpc_additional_cidr.tf:111"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="vpc_additional_cidr.tf:111"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="vpc_additional_cidr.tf:123"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="vpc_additional_cidr.tf:123"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="vpc_additional_cidr.tf:135"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="vpc_additional_cidr.tf:135"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="vpc_additional_cidr.tf:84"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="vpc_additional_cidr.tf:84"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="vpc_additional_cidr.tf:96"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-excessive-port-access" range="vpc_additional_cidr.tf:96"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-egress-sgr" range="ad-fixngo.tf:1075"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-egress-sgr" range="ad-fixngo.tf:1075"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-egress-sgr" range="ad-fixngo.tf:1067-1078"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-egress-sgr" range="ad-fixngo.tf:1067-1078"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-egress-sgr" range="ad-fixngo.tf:1075"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-egress-sgr" range="ad-fixngo.tf:1075"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-egress-sgr" range="ad-fixngo.tf:1067-1078"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-egress-sgr" range="ad-fixngo.tf:1067-1078"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-ecr-repository-customer-key" range="../../modules/app-ecr-repo/main.tf:7-9"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-ecr-repository-customer-key" range="../../modules/app-ecr-repo/main.tf:7-9"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-ecr-repository-customer-key" range="../../modules/app-ecr-repo/main.tf:7-9"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-ecr-repository-customer-key" range="../../modules/app-ecr-repo/main.tf:7-9"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-ecr-repository-customer-key" range="../../modules/app-ecr-repo/main.tf:7-9"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-ecr-repository-customer-key" range="../../modules/app-ecr-repo/main.tf:7-9"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-ecr-repository-customer-key" range="../../modules/app-ecr-repo/main.tf:7-9"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-ecr-repository-customer-key" range="../../modules/app-ecr-repo/main.tf:7-9"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-ecr-repository-customer-key" range="../../modules/app-ecr-repo/main.tf:7-9"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-ecr-repository-customer-key" range="../../modules/app-ecr-repo/main.tf:7-9"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-ecr-repository-customer-key" range="../../modules/app-ecr-repo/main.tf:7-9"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-ecr-repository-customer-key" range="../../modules/app-ecr-repo/main.tf:7-9"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-ecr-repository-customer-key" range="../../modules/app-ecr-repo/main.tf:7-9"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-ecr-repository-customer-key" range="../../modules/app-ecr-repo/main.tf:7-9"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-ecr-repository-customer-key" range="../../modules/app-ecr-repo/main.tf:7-9"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-ecr-repository-customer-key" range="../../modules/app-ecr-repo/main.tf:7-9"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-ecr-repository-customer-key" range="../../modules/app-ecr-repo/main.tf:7-9"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-ecr-repository-customer-key" range="../../modules/app-ecr-repo/main.tf:7-9"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-ecr-repository-customer-key" range="../../modules/app-ecr-repo/main.tf:7-9"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-ecr-repository-customer-key" range="../../modules/app-ecr-repo/main.tf:7-9"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-ecr-repository-customer-key" range="../../modules/app-ecr-repo/main.tf:7-9"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-ecr-repository-customer-key" range="../../modules/app-ecr-repo/main.tf:7-9"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-ecr-repository-customer-key" range="../../modules/app-ecr-repo/main.tf:7-9"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-ecr-repository-customer-key" range="../../modules/app-ecr-repo/main.tf:7-9"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-ecr-repository-customer-key" range="../../modules/app-ecr-repo/main.tf:7-9"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-ecr-repository-customer-key" range="../../modules/app-ecr-repo/main.tf:7-9"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-ecr-repository-customer-key" range="../../modules/app-ecr-repo/main.tf:7-9"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-ecr-repository-customer-key" range="../../modules/app-ecr-repo/main.tf:7-9"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-ecr-repository-customer-key" range="../../modules/app-ecr-repo/main.tf:7-9"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-ecr-repository-customer-key" range="../../modules/app-ecr-repo/main.tf:7-9"
2024-09-30T15:50:22Z INFO [terraform executor] Ignore finding rule="aws-ecr-repository-customer-key" range="../../modules/app-ecr-repo/main.tf:7-9"
2024-09-30T15:50:22Z INFO Number of language-specific files num=1
2024-09-30T15:50:22Z INFO [gomod] Detecting vulnerabilities...
2024-09-30T15:50:22Z INFO Detected config files num=8
trivy_exitcode=0

Running Trivy in terraform/environments/core-vpc
2024-09-30T15:50:23Z INFO [vuln] Vulnerability scanning is enabled
2024-09-30T15:50:23Z INFO [misconfig] Misconfiguration scanning is enabled
2024-09-30T15:50:23Z INFO [secret] Secret scanning is enabled
2024-09-30T15:50:23Z INFO [secret] If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2024-09-30T15:50:23Z INFO [secret] Please see also https://aquasecurity.github.io/trivy/v0.55/docs/scanner/secret#recommendation for faster secret detection
2024-09-30T15:50:23Z INFO [terraform scanner] Scanning root module file_path="."
2024-09-30T15:50:23Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="aws_iam_role.member-delegation" value="cty.NilVal"
2024-09-30T15:50:23Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="aws_iam_role_policy.member-delegation" value="cty.NilVal"
2024-09-30T15:50:23Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.dns-zone" value="cty.NilVal"
2024-09-30T15:50:23Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.dns_zone_extend" value="cty.NilVal"
2024-09-30T15:50:23Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.dns_zone_extend_private" value="cty.NilVal"
2024-09-30T15:50:23Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.resource-share" value="cty.NilVal"
2024-09-30T15:50:23Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc" value="cty.NilVal"
2024-09-30T15:50:23Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc_attachment" value="cty.NilVal"
2024-09-30T15:50:23Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.vpc_nacls" value="cty.NilVal"
2024-09-30T15:50:23Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:23Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:23Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:23Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:23Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:23Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:48"
2024-09-30T15:50:23Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:23Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:23Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:23Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:23Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:23Z INFO [terraform executor] Ignore finding rule="aws-iam-no-policy-wildcards" range="iam.tf:48"
2024-09-30T15:50:23Z INFO [terraform executor] Ignore finding rule="aws-sns-enable-topic-encryption" range="monitoring.tf:9-15"
2024-09-30T15:50:23Z INFO Number of language-specific files num=0
2024-09-30T15:50:23Z INFO Detected config files num=3
trivy_exitcode=0

</details> #### `Checkov Scan` Success
<details><summary>Show Output</summary>

```hcl

*****************************

Checkov will check the following folders:
terraform/environments/core-logging
terraform/environments/core-network-services
terraform/environments/core-security
terraform/environments/core-shared-services
terraform/environments/core-vpc

*****************************

Running Checkov in terraform/environments/core-logging
Excluding the following checks: CKV_GIT_1,CKV_AWS_126,CKV2_AWS_38,CKV2_AWS_39
2024-09-30 15:50:26,476 [MainThread  ] [WARNI]  Failed to download module github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=8688bc15a08fbf5a4f4eef9b7433c5a417df8df1:None (for external modules, the --download-external-modules flag is required)
2024-09-30 15:50:26,476 [MainThread  ] [WARNI]  Failed to download module github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a:None (for external modules, the --download-external-modules flag is required)
2024-09-30 15:50:26,476 [MainThread  ] [WARNI]  Failed to download module github.com/ministryofjustice/terraform-aws-observability-platform-tenant?ref=fbbe5c8282786bcc0a00c969fe598e14f12eea9b:None (for external modules, the --download-external-modules flag is required)
2024-09-30 15:50:26,477 [MainThread  ] [WARNI]  Failed to download module github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=4e17731f72ef24b804207f55b182f49057e73ec9:None (for external modules, the --download-external-modules flag is required)
terraform scan results:

Passed checks: 378, Failed checks: 0, Skipped checks: 70


checkov_exitcode=0

*****************************

Running Checkov in terraform/environments/core-network-services
Excluding the following checks: CKV_GIT_1,CKV_AWS_126,CKV2_AWS_38,CKV2_AWS_39
2024-09-30 15:50:29,633 [MainThread  ] [WARNI]  Failed to download module github.com/ministryofjustice/modernisation-platform-terraform-pagerduty-integration?ref=0179859e6fafc567843cd55c0b05d325d5012dc4:None (for external modules, the --download-external-modules flag is required)
2024-09-30 15:50:29,633 [MainThread  ] [WARNI]  Failed to download module github.com/ministryofjustice/modernisation-platform-terraform-aws-data-firehose?ref=2e58c8fd0b43ca8461dfd0c8cc5f43a1a9c49987:None (for external modules, the --download-external-modules flag is required)
2024-09-30 15:50:29,633 [MainThread  ] [WARNI]  Failed to download module github.com/ministryofjustice/terraform-aws-observability-platform-tenant?ref=fbbe5c8282786bcc0a00c969fe598e14f12eea9b:None (for external modules, the --download-external-modules flag is required)
2024-09-30 15:50:29,633 [MainThread  ] [WARNI]  Failed to download module github.com/ministryofjustice/modernisation-platform-terraform-aws-chatbot?ref=73280f80ce8a4557cec3a76ee56eb913452ca9aa:None (for external modules, the --download-external-modules flag is required)
terraform scan results:

Passed checks: 275, Failed checks: 0, Skipped checks: 65


checkov_exitcode=0

*****************************

Running Checkov in terraform/environments/core-security
Excluding the following checks: CKV_GIT_1,CKV_AWS_126,CKV2_AWS_38,CKV2_AWS_39
2024-09-30 15:50:33,701 [MainThread  ] [WARNI]  Failed to download module github.com/ministryofjustice/terraform-aws-observability-platform-tenant?ref=fbbe5c8282786bcc0a00c969fe598e14f12eea9b:None (for external modules, the --download-external-modules flag is required)
terraform scan results:

Passed checks: 134, Failed checks: 0, Skipped checks: 28


checkov_exitcode=0

*****************************

Running Checkov in terraform/environments/core-shared-services
Excluding the following checks: CKV_GIT_1,CKV_AWS_126,CKV2_AWS_38,CKV2_AWS_39
2024-09-30 15:50:36,594 [MainThread  ] [WARNI]  Failed to download module github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=8688bc15a08fbf5a4f4eef9b7433c5a417df8df1:None (for external modules, the --download-external-modules flag is required)
2024-09-30 15:50:36,594 [MainThread  ] [WARNI]  Failed to download module github.com/ministryofjustice/modernisation-platform-github-oidc-provider?ref=82f546bd5f002674138a2ccdade7d7618c6758b3:None (for external modules, the --download-external-modules flag is required)
2024-09-30 15:50:36,594 [MainThread  ] [WARNI]  Failed to download module github.com/ministryofjustice/modernisation-platform-terraform-cross-account-access?ref=6819b090bce6d3068d55c7c7b9b3fd18c9dca648:None (for external modules, the --download-external-modules flag is required)
2024-09-30 15:50:36,594 [MainThread  ] [WARNI]  Failed to download module github.com/ministryofjustice/terraform-aws-observability-platform-tenant?ref=fbbe5c8282786bcc0a00c969fe598e14f12eea9b:None (for external modules, the --download-external-modules flag is required)
2024-09-30 15:50:36,594 [MainThread  ] [WARNI]  Failed to download module github.com/ministryofjustice/modernisation-platform-environments//terraform/modules/ip_addresses?ref=29c48e315aa5eeef5d604617169b2f6db953966e:None (for external modules, the --download-external-modules flag is required)
2024-09-30 15:50:36,595 [MainThread  ] [WARNI]  Failed to download module github.com/ministryofjustice/modernisation-platform-terraform-ssm-patching.git?ref=d1be56ad6bceeee3fb0a1beb9ad0d61ea07d0259:None (for external modules, the --download-external-modules flag is required)
2024-09-30 15:50:36,595 [MainThread  ] [WARNI]  Failed to download module github.com/ministryofjustice/modernisation-platform-terraform-lambda-function?ref=5a3c02a071519986a0ae415168fb4f9d3fb7970f:None (for external modules, the --download-external-modules flag is required)
2024-09-30 15:50:36,595 [MainThread  ] [WARNI]  Failed to download module github.com/ministryofjustice/modernisation-platform-terraform-pagerduty-integration?ref=0179859e6fafc567843cd55c0b05d325d5012dc4:None (for external modules, the --download-external-modules flag is required)
terraform scan results:

Passed checks: 1062, Failed checks: 0, Skipped checks: 110


checkov_exitcode=0

*****************************

Running Checkov in terraform/environments/core-vpc
Excluding the following checks: CKV_GIT_1,CKV_AWS_126,CKV2_AWS_38,CKV2_AWS_39
2024-09-30 15:50:42,332 [MainThread  ] [WARNI]  Failed to download module github.com/ministryofjustice/modernisation-platform-terraform-pagerduty-integration?ref=0179859e6fafc567843cd55c0b05d325d5012dc4:None (for external modules, the --download-external-modules flag is required)
2024-09-30 15:50:42,332 [MainThread  ] [WARNI]  Failed to download module github.com/ministryofjustice/modernisation-platform-terraform-member-vpc?ref=0ba18bb790c4259512768ffb6db9c2852654b82f:None (for external modules, the --download-external-modules flag is required)
2024-09-30 15:50:42,333 [MainThread  ] [WARNI]  Failed to download module github.com/ministryofjustice/terraform-aws-observability-platform-tenant?ref=fbbe5c8282786bcc0a00c969fe598e14f12eea9b:None (for external modules, the --download-external-modules flag is required)
terraform scan results:

Passed checks: 116, Failed checks: 0, Skipped checks: 24


checkov_exitcode=0

CTFLint Scan Success

Show Output 
*****************************

Setting default tflint config...
Running tflint --init...
Installing "terraform" plugin...
Installed "terraform" (source: github.com/terraform-linters/tflint-ruleset-terraform, version: 0.9.1)
tflint will check the following folders:
terraform/environments/core-logging
terraform/environments/core-network-services
terraform/environments/core-security
terraform/environments/core-shared-services
terraform/environments/core-vpc

*****************************

Running tflint in terraform/environments/core-logging
Excluding the following checks: terraform_unused_declarations
tflint_exitcode=0

*****************************

Running tflint in terraform/environments/core-network-services
Excluding the following checks: terraform_unused_declarations
tflint_exitcode=0

*****************************

Running tflint in terraform/environments/core-security
Excluding the following checks: terraform_unused_declarations
tflint_exitcode=0

*****************************

Running tflint in terraform/environments/core-shared-services
Excluding the following checks: terraform_unused_declarations
tflint_exitcode=0

*****************************

Running tflint in terraform/environments/core-vpc
Excluding the following checks: terraform_unused_declarations
tflint_exitcode=0

Trivy Scan Success

Show Output 
*****************************

Trivy will check the following folders:
terraform/environments/core-logging
terraform/environments/core-network-services
terraform/environments/core-security
terraform/environments/core-shared-services
terraform/environments/core-vpc

*****************************

Running Trivy in terraform/environments/core-logging
2024-09-30T15:49:56Z	INFO	[db] Need to update DB
2024-09-30T15:49:56Z	INFO	[db] Downloading DB...	repository="ghcr.io/aquasecurity/trivy-db:2"
2024-09-30T15:49:58Z	INFO	[vuln] Vulnerability scanning is enabled
2024-09-30T15:49:58Z	INFO	[misconfig] Misconfiguration scanning is enabled
2024-09-30T15:49:58Z	INFO	Need to update the built-in policies
2024-09-30T15:49:58Z	INFO	Downloading the built-in policies...
74.86 KiB / 74.86 KiB [-----------------------------------------------------------] 100.00% ? p/s 0s2024-09-30T15:49:59Z	INFO	[secret] Secret scanning is enabled
2024-09-30T15:49:59Z	INFO	[secret] If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2024-09-30T15:49:59Z	INFO	[secret] Please see also https://aquasecurity.github.io/trivy/v0.55/docs/scanner/secret#recommendation for faster secret detection
2024-09-30T15:50:00Z	INFO	[terraform scanner] Scanning root module	file_path="."
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.s3-bucket-athena.dynamic.expiration" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.s3-bucket-athena.dynamic.transition" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.s3-bucket-athena.dynamic.noncurrent_version_expiration" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.s3-bucket-athena.dynamic.noncurrent_version_transition" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.s3-bucket-athena.dynamic.principals" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.s3-bucket-athena.dynamic.condition" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.s3-bucket-athena.dynamic.expiration" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.s3-bucket-athena.dynamic.transition" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.s3-bucket-athena.dynamic.noncurrent_version_expiration" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.s3-bucket-athena.dynamic.noncurrent_version_transition" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.s3-bucket-athena.dynamic.principals" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.s3-bucket-athena.dynamic.condition" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.s3-bucket-cloudtrail.aws_s3_bucket_logging.default" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.s3-bucket-cloudtrail.dynamic.expiration" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.s3-bucket-cloudtrail.dynamic.transition" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.s3-bucket-cloudtrail.dynamic.noncurrent_version_expiration" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.s3-bucket-cloudtrail.dynamic.noncurrent_version_transition" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.s3-bucket-cloudtrail.dynamic.principals" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.s3-bucket-cloudtrail.dynamic.condition" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.s3-bucket-cloudtrail.dynamic.expiration" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.s3-bucket-cloudtrail.dynamic.transition" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.s3-bucket-cloudtrail.dynamic.noncurrent_version_expiration" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.s3-bucket-cloudtrail.dynamic.noncurrent_version_transition" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.s3-bucket-cloudtrail.dynamic.principals" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.s3-bucket-cloudtrail.dynamic.condition" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.s3-bucket-cloudtrail-logging.dynamic.expiration" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.s3-bucket-cloudtrail-logging.dynamic.transition" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.s3-bucket-cloudtrail-logging.dynamic.noncurrent_version_expiration" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.s3-bucket-cloudtrail-logging.dynamic.noncurrent_version_transition" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.s3-bucket-cloudtrail-logging.dynamic.principals" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.s3-bucket-cloudtrail-logging.dynamic.condition" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.s3-bucket-cloudtrail-logging.dynamic.expiration" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.s3-bucket-cloudtrail-logging.dynamic.transition" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.s3-bucket-cloudtrail-logging.dynamic.noncurrent_version_expiration" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.s3-bucket-cloudtrail-logging.dynamic.noncurrent_version_transition" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.s3-bucket-cloudtrail-logging.dynamic.principals" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.s3-bucket-cloudtrail-logging.dynamic.condition" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.s3-bucket-cloudtrail.dynamic.expiration" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.s3-bucket-cloudtrail.dynamic.transition" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.s3-bucket-cloudtrail.dynamic.noncurrent_version_expiration" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.s3-bucket-cloudtrail.dynamic.noncurrent_version_transition" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.s3-bucket-cloudtrail.dynamic.principals" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.s3-bucket-cloudtrail.dynamic.condition" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.s3-bucket-cloudtrail.dynamic.expiration" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.s3-bucket-cloudtrail.dynamic.transition" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.s3-bucket-cloudtrail.dynamic.noncurrent_version_expiration" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.s3-bucket-cloudtrail.dynamic.noncurrent_version_transition" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.s3-bucket-cloudtrail.dynamic.principals" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.s3-bucket-cloudtrail.dynamic.condition" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.s3-grafana-athena-query-results.dynamic.expiration" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.s3-grafana-athena-query-results.dynamic.transition" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.s3-grafana-athena-query-results.dynamic.noncurrent_version_expiration" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.s3-grafana-athena-query-results.dynamic.noncurrent_version_transition" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.s3-grafana-athena-query-results.dynamic.principals" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.s3-grafana-athena-query-results.dynamic.condition" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.s3-grafana-athena-query-results.dynamic.expiration" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.s3-grafana-athena-query-results.dynamic.transition" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.s3-grafana-athena-query-results.dynamic.noncurrent_version_expiration" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.s3-grafana-athena-query-results.dynamic.noncurrent_version_transition" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.s3-grafana-athena-query-results.dynamic.principals" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.s3-grafana-athena-query-results.dynamic.condition" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc[\"live_data\"].aws_subnet.data" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc[\"live_data\"].aws_subnet.private" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc[\"live_data\"].aws_subnet.public" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc[\"live_data\"].aws_subnet.transit-gateway" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc[\"live_data\"].aws_eip.public" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc[\"live_data\"].aws_nat_gateway.public" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc[\"live_data\"].aws_route.data-tgw" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc[\"live_data\"].aws_route.private-tgw" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc[\"non_live_data\"].aws_subnet.data" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc[\"non_live_data\"].aws_subnet.private" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc[\"non_live_data\"].aws_subnet.public" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc[\"non_live_data\"].aws_subnet.transit-gateway" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc[\"non_live_data\"].aws_eip.public" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc[\"non_live_data\"].aws_nat_gateway.public" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc[\"non_live_data\"].aws_route.data-tgw" value="cty.NilVal"
2024-09-30T15:50:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc[\"non_live_data\"].aws_route.private-tgw" value="cty.NilVal"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:232"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:224-237"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:224-237"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:224-237"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:232"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:232"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:224-237"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:483"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:483"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:232"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:224-237"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:224-237"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:224-237"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:232"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:232"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:224-237"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:483"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:483"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:48"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:48"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/replication.tf:205-253"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-lambda-enable-tracing" range="athena.tf:256-279"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-s3-enable-bucket-encryption" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=8688bc15a08fbf5a4f4eef9b7433c5a417df8df1/main.tf:8-19"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-s3-enable-bucket-encryption" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/main.tf:16-27"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-s3-enable-bucket-encryption" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/main.tf:16-27"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-s3-enable-bucket-encryption" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=4e17731f72ef24b804207f55b182f49057e73ec9/main.tf:16-27"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-s3-enable-versioning" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=8688bc15a08fbf5a4f4eef9b7433c5a417df8df1/main.tf:8-19"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-s3-enable-versioning" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/main.tf:16-27"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-s3-enable-versioning" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/main.tf:16-27"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-s3-enable-versioning" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=4e17731f72ef24b804207f55b182f49057e73ec9/main.tf:16-27"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-s3-encryption-customer-key" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=8688bc15a08fbf5a4f4eef9b7433c5a417df8df1/main.tf:8-19"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-s3-encryption-customer-key" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=cadab519b10a7d28dfa3b77d407725db6b37614a/main.tf:16-27"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-s3-encryption-customer-key" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=4e17731f72ef24b804207f55b182f49057e73ec9/main.tf:150-160"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-cloudwatch-log-group-customer-key" range="../../modules/vpc-hub/main.tf:133-138"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-cloudwatch-log-group-customer-key" range="../../modules/vpc-hub/main.tf:133-138"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:408"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:334"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:234"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:234"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:234"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:224-237"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:485"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:408"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:334"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:234"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:234"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:234"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:224-237"
2024-09-30T15:50:01Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:485"
2024-09-30T15:50:01Z	INFO	Number of language-specific files	num=1
2024-09-30T15:50:01Z	INFO	[gomod] Detecting vulnerabilities...
2024-09-30T15:50:01Z	INFO	Detected config files	num=13
trivy_exitcode=0

*****************************

Running Trivy in terraform/environments/core-network-services
2024-09-30T15:50:02Z	INFO	[vuln] Vulnerability scanning is enabled
2024-09-30T15:50:02Z	INFO	[misconfig] Misconfiguration scanning is enabled
2024-09-30T15:50:02Z	INFO	[secret] Secret scanning is enabled
2024-09-30T15:50:02Z	INFO	[secret] If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2024-09-30T15:50:02Z	INFO	[secret] Please see also https://aquasecurity.github.io/trivy/v0.55/docs/scanner/secret#recommendation for faster secret detection
2024-09-30T15:50:03Z	INFO	[terraform scanner] Scanning root module	file_path="."
2024-09-30T15:50:03Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="aws_cloudwatch_metric_alarm.nat_packets_drop_count" value="cty.NilVal"
2024-09-30T15:50:03Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="aws_ec2_transit_gateway_route_table_propagation.propagate_live_data_vpcs" value="cty.NilVal"
2024-09-30T15:50:03Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="aws_ec2_transit_gateway_route_table_propagation.propagate_noms_routes_to_firewall" value="cty.NilVal"
2024-09-30T15:50:03Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="aws_ec2_transit_gateway_route_table_propagation.propagate_non_live_data_vpcs" value="cty.NilVal"
2024-09-30T15:50:03Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="aws_route_table.external_inspection_in" value="cty.NilVal"
2024-09-30T15:50:03Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="aws_route_table_association.external_inspection_in" value="cty.NilVal"
2024-09-30T15:50:03Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="aws_route_table_association.external_inspection_out" value="cty.NilVal"
2024-09-30T15:50:03Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="aws_subnet.external_inspection_in" value="cty.NilVal"
2024-09-30T15:50:03Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="aws_subnet.external_inspection_out" value="cty.NilVal"
2024-09-30T15:50:03Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="data.aws_ec2_transit_gateway_vpc_attachment.transit_gateway_all" value="cty.NilVal"
2024-09-30T15:50:03Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="data.aws_route.live_data" value="cty.NilVal"
2024-09-30T15:50:03Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="data.aws_route.non_live_data" value="cty.NilVal"
2024-09-30T15:50:03Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="aws_ec2_transit_gateway_route_table_propagation.propagate_firewall" value="cty.NilVal"
2024-09-30T15:50:03Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.firewall_policy.dynamic.ip_sets" value="cty.NilVal"
2024-09-30T15:50:03Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.firewall_policy.dynamic.port_sets" value="cty.NilVal"
2024-09-30T15:50:03Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.firewall_policy.dynamic.ip_sets" value="cty.NilVal"
2024-09-30T15:50:03Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.firewall_policy.dynamic.port_sets" value="cty.NilVal"
2024-09-30T15:50:04Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc_inspection[\"live_data\"].aws_flow_log.s3" value="cty.NilVal"
2024-09-30T15:50:04Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc_inspection[\"live_data\"].aws_subnet.inspection" value="cty.NilVal"
2024-09-30T15:50:04Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc_inspection[\"live_data\"].aws_subnet.public" value="cty.NilVal"
2024-09-30T15:50:04Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc_inspection[\"live_data\"].aws_subnet.transit-gateway" value="cty.NilVal"
2024-09-30T15:50:04Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc_inspection[\"live_data\"].aws_route.inspection-0-0-0-0" value="cty.NilVal"
2024-09-30T15:50:04Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc_inspection[\"live_data\"].aws_route.inspection-10-20-0-0" value="cty.NilVal"
2024-09-30T15:50:04Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc_inspection[\"live_data\"].aws_route.inspection-10-231-0-0" value="cty.NilVal"
2024-09-30T15:50:04Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc_inspection[\"live_data\"].aws_route.inspection-10-26-0-0" value="cty.NilVal"
2024-09-30T15:50:04Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc_inspection[\"live_data\"].aws_route.inspection-10-27-0-0" value="cty.NilVal"
2024-09-30T15:50:04Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc_inspection[\"live_data\"].aws_route.public-0-0-0-0" value="cty.NilVal"
2024-09-30T15:50:04Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc_inspection[\"live_data\"].aws_route.public-10-20-0-0" value="cty.NilVal"
2024-09-30T15:50:04Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc_inspection[\"live_data\"].aws_route.public-10-231-0-0" value="cty.NilVal"
2024-09-30T15:50:04Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc_inspection[\"live_data\"].aws_route.public-10-26-0-0" value="cty.NilVal"
2024-09-30T15:50:04Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc_inspection[\"live_data\"].aws_route.public-10-27-0-0" value="cty.NilVal"
2024-09-30T15:50:04Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc_inspection[\"non_live_data\"].aws_subnet.inspection" value="cty.NilVal"
2024-09-30T15:50:04Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc_inspection[\"non_live_data\"].aws_subnet.public" value="cty.NilVal"
2024-09-30T15:50:04Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc_inspection[\"non_live_data\"].aws_subnet.transit-gateway" value="cty.NilVal"
2024-09-30T15:50:04Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc_inspection[\"non_live_data\"].aws_route.inspection-0-0-0-0" value="cty.NilVal"
2024-09-30T15:50:04Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc_inspection[\"non_live_data\"].aws_route.inspection-10-20-0-0" value="cty.NilVal"
2024-09-30T15:50:04Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc_inspection[\"non_live_data\"].aws_route.inspection-10-231-0-0" value="cty.NilVal"
2024-09-30T15:50:04Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc_inspection[\"non_live_data\"].aws_route.inspection-10-26-0-0" value="cty.NilVal"
2024-09-30T15:50:04Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc_inspection[\"non_live_data\"].aws_route.inspection-10-27-0-0" value="cty.NilVal"
2024-09-30T15:50:04Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc_inspection[\"non_live_data\"].aws_route.public-0-0-0-0" value="cty.NilVal"
2024-09-30T15:50:04Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc_inspection[\"non_live_data\"].aws_route.public-10-20-0-0" value="cty.NilVal"
2024-09-30T15:50:04Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc_inspection[\"non_live_data\"].aws_route.public-10-231-0-0" value="cty.NilVal"
2024-09-30T15:50:04Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc_inspection[\"non_live_data\"].aws_route.public-10-26-0-0" value="cty.NilVal"
2024-09-30T15:50:04Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc_inspection[\"non_live_data\"].aws_route.public-10-27-0-0" value="cty.NilVal"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-inspection/main.tf:280"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-inspection/main.tf:267-283"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-inspection/main.tf:378"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-inspection/main.tf:365-381"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-inspection/main.tf:186"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-inspection/main.tf:173-189"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-inspection/main.tf:280"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-inspection/main.tf:267-283"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-inspection/main.tf:378"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-inspection/main.tf:365-381"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-inspection/main.tf:186"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-inspection/main.tf:173-189"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-cloudwatch-log-group-customer-key" range="../../modules/firewall-logging/main.tf:21-26"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-cloudwatch-log-group-customer-key" range="../../modules/firewall-logging/main.tf:21-26"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-cloudwatch-log-group-customer-key" range="../../modules/firewall-logging/main.tf:21-26"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-inspection/main.tf:278"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-inspection/main.tf:278"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-inspection/main.tf:278"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-inspection/main.tf:278"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-inspection/main.tf:376"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-inspection/main.tf:376"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-inspection/main.tf:376"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-inspection/main.tf:376"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-inspection/main.tf:184"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-inspection/main.tf:184"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-inspection/main.tf:184"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-inspection/main.tf:184"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-inspection/main.tf:278"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-inspection/main.tf:278"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-inspection/main.tf:278"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-inspection/main.tf:278"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-inspection/main.tf:376"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-inspection/main.tf:376"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-inspection/main.tf:376"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-inspection/main.tf:376"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-inspection/main.tf:184"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-inspection/main.tf:184"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-inspection/main.tf:184"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-inspection/main.tf:184"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:48"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:118"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:118"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:118"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:117-142"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:117-142"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:117-142"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:117-142"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:117-142"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:117-142"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:117-142"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:117-142"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:117-142"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:117-142"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:117-142"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:117-142"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:117-142"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:117-142"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:117-142"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:117-142"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:184"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:184"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:184"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:48"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-s3-block-public-acls" range="acm-pca.tf:14-31"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-s3-enable-bucket-encryption" range="acm-pca.tf:14-31"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-s3-enable-versioning" range="acm-pca.tf:14-31"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-s3-encryption-customer-key" range="acm-pca.tf:14-31"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-sns-enable-topic-encryption" range="monitoring.tf:189-193"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-sns-enable-topic-encryption" range="monitoring.tf:11-17"
2024-09-30T15:50:04Z	INFO	[terraform executor] Ignore finding	rule="aws-sns-enable-topic-encryption" range="monitoring.tf:124-129"
2024-09-30T15:50:04Z	INFO	Number of language-specific files	num=1
2024-09-30T15:50:04Z	INFO	[gomod] Detecting vulnerabilities...
2024-09-30T15:50:04Z	INFO	Detected config files	num=9
trivy_exitcode=0

*****************************

Running Trivy in terraform/environments/core-security
2024-09-30T15:50:04Z	INFO	[vuln] Vulnerability scanning is enabled
2024-09-30T15:50:04Z	INFO	[misconfig] Misconfiguration scanning is enabled
2024-09-30T15:50:04Z	INFO	[secret] Secret scanning is enabled
2024-09-30T15:50:04Z	INFO	[secret] If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2024-09-30T15:50:04Z	INFO	[secret] Please see also https://aquasecurity.github.io/trivy/v0.55/docs/scanner/secret#recommendation for faster secret detection
2024-09-30T15:50:05Z	INFO	[terraform scanner] Scanning root module	file_path="."
2024-09-30T15:50:05Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc[\"live_data\"].aws_flow_log.s3" value="cty.NilVal"
2024-09-30T15:50:05Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc[\"live_data\"].aws_subnet.data" value="cty.NilVal"
2024-09-30T15:50:05Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc[\"live_data\"].aws_subnet.private" value="cty.NilVal"
2024-09-30T15:50:05Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc[\"live_data\"].aws_subnet.public" value="cty.NilVal"
2024-09-30T15:50:05Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc[\"live_data\"].aws_subnet.transit-gateway" value="cty.NilVal"
2024-09-30T15:50:05Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc[\"live_data\"].aws_eip.public" value="cty.NilVal"
2024-09-30T15:50:05Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc[\"live_data\"].aws_nat_gateway.public" value="cty.NilVal"
2024-09-30T15:50:05Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc[\"live_data\"].aws_route.data-tgw" value="cty.NilVal"
2024-09-30T15:50:05Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc[\"live_data\"].aws_route.private-tgw" value="cty.NilVal"
2024-09-30T15:50:05Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc[\"non_live_data\"].aws_subnet.data" value="cty.NilVal"
2024-09-30T15:50:05Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc[\"non_live_data\"].aws_subnet.private" value="cty.NilVal"
2024-09-30T15:50:05Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc[\"non_live_data\"].aws_subnet.public" value="cty.NilVal"
2024-09-30T15:50:05Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc[\"non_live_data\"].aws_subnet.transit-gateway" value="cty.NilVal"
2024-09-30T15:50:05Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc[\"non_live_data\"].aws_eip.public" value="cty.NilVal"
2024-09-30T15:50:05Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc[\"non_live_data\"].aws_nat_gateway.public" value="cty.NilVal"
2024-09-30T15:50:05Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc[\"non_live_data\"].aws_route.data-tgw" value="cty.NilVal"
2024-09-30T15:50:05Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc[\"non_live_data\"].aws_route.private-tgw" value="cty.NilVal"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:408"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:334"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:234"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:234"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:234"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:224-237"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:485"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:408"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:334"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:234"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:234"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:234"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:224-237"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="../../modules/vpc-hub/main.tf:485"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-cloudwatch-log-group-customer-key" range="../../modules/vpc-hub/main.tf:133-138"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-cloudwatch-log-group-customer-key" range="../../modules/vpc-hub/main.tf:133-138"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:232"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:224-237"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:224-237"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:224-237"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:232"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:232"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:224-237"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:483"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:483"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:398-411"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:406"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:324-337"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:332"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:232"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:224-237"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:224-237"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:224-237"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:232"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:232"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:224-237"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:483"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="../../modules/vpc-hub/main.tf:483"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:48"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:05Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:48"
2024-09-30T15:50:06Z	INFO	Number of language-specific files	num=1
2024-09-30T15:50:06Z	INFO	[gomod] Detecting vulnerabilities...
2024-09-30T15:50:06Z	INFO	Detected config files	num=3
trivy_exitcode=0

*****************************

Running Trivy in terraform/environments/core-shared-services
2024-09-30T15:50:06Z	INFO	[vuln] Vulnerability scanning is enabled
2024-09-30T15:50:06Z	INFO	[misconfig] Misconfiguration scanning is enabled
2024-09-30T15:50:06Z	INFO	[secret] Secret scanning is enabled
2024-09-30T15:50:06Z	INFO	[secret] If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2024-09-30T15:50:06Z	INFO	[secret] Please see also https://aquasecurity.github.io/trivy/v0.55/docs/scanner/secret#recommendation for faster secret detection
2024-09-30T15:50:08Z	INFO	[terraform scanner] Scanning root module	file_path="."
2024-09-30T15:50:08Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="aws_subnet.live-data-additional" value="cty.NilVal"
2024-09-30T15:50:08Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="aws_security_group.image_builder_security_group" value="cty.NilVal"
2024-09-30T15:50:08Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="aws_security_group.interface_endpoint_security_group" value="cty.NilVal"
2024-09-30T15:50:08Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="aws_security_group_rule.image_builder_egress_443" value="cty.NilVal"
2024-09-30T15:50:08Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="aws_security_group_rule.image_builder_egress_80" value="cty.NilVal"
2024-09-30T15:50:08Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="aws_security_group_rule.interface_endpoint-security_group_rule" value="cty.NilVal"
2024-09-30T15:50:08Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="dynamic.ephemeral_block_device" value="cty.NilVal"
2024-09-30T15:50:08Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="dynamic.ephemeral_block_device" value="cty.NilVal"
2024-09-30T15:50:08Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="dynamic.ephemeral_block_device" value="cty.NilVal"
2024-09-30T15:50:08Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="dynamic.ephemeral_block_device" value="cty.NilVal"
2024-09-30T15:50:08Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="dynamic.ip_address" value="cty.NilVal"
2024-09-30T15:50:08Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="dynamic.ip_address" value="cty.NilVal"
2024-09-30T15:50:08Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="dynamic.target_ip" value="cty.NilVal"
2024-09-30T15:50:08Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="dynamic.target_ip" value="cty.NilVal"
2024-09-30T15:50:08Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="dynamic.target_ip" value="cty.NilVal"
2024-09-30T15:50:08Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="dynamic.ephemeral_block_device" value="cty.NilVal"
2024-09-30T15:50:08Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="dynamic.ephemeral_block_device" value="cty.NilVal"
2024-09-30T15:50:08Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="dynamic.ephemeral_block_device" value="cty.NilVal"
2024-09-30T15:50:08Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="dynamic.ephemeral_block_device" value="cty.NilVal"
2024-09-30T15:50:08Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="dynamic.ip_address" value="cty.NilVal"
2024-09-30T15:50:08Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="dynamic.ip_address" value="cty.NilVal"
2024-09-30T15:50:08Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="dynamic.target_ip" value="cty.NilVal"
2024-09-30T15:50:08Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="dynamic.target_ip" value="cty.NilVal"
2024-09-30T15:50:08Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="dynamic.target_ip" value="cty.NilVal"
2024-09-30T15:50:18Z	ERROR	[terraform evaluator] Failed to load module. Maybe try 'terraform init'?	err="open terraform/modules/ip_addresses: no such file or directory"
2024-09-30T15:50:22Z	INFO	[terraform scanner] Scanning root module	file_path="test/test_terraform"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-ingress-acl" range="vpc_additional_cidr.tf:143"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:270-285"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:275"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:270-285"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:282"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:48"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:126-138"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:127"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:127"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:48"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-sns-enable-topic-encryption" range="instance-scheduler-lambda-function.tf:84-87"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-sns-enable-topic-encryption" range="instance-scheduler-lambda-function.tf:90-93"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="vpc_additional_cidr.tf:142-151"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="vpc_additional_cidr.tf:111"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="vpc_additional_cidr.tf:111"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="vpc_additional_cidr.tf:123"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="vpc_additional_cidr.tf:123"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="vpc_additional_cidr.tf:135"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="vpc_additional_cidr.tf:135"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="vpc_additional_cidr.tf:84"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="vpc_additional_cidr.tf:84"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="vpc_additional_cidr.tf:96"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-excessive-port-access" range="vpc_additional_cidr.tf:96"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-egress-sgr" range="ad-fixngo.tf:1075"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-egress-sgr" range="ad-fixngo.tf:1075"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-egress-sgr" range="ad-fixngo.tf:1067-1078"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-egress-sgr" range="ad-fixngo.tf:1067-1078"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-egress-sgr" range="ad-fixngo.tf:1075"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-egress-sgr" range="ad-fixngo.tf:1075"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-egress-sgr" range="ad-fixngo.tf:1067-1078"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-egress-sgr" range="ad-fixngo.tf:1067-1078"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-ecr-repository-customer-key" range="../../modules/app-ecr-repo/main.tf:7-9"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-ecr-repository-customer-key" range="../../modules/app-ecr-repo/main.tf:7-9"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-ecr-repository-customer-key" range="../../modules/app-ecr-repo/main.tf:7-9"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-ecr-repository-customer-key" range="../../modules/app-ecr-repo/main.tf:7-9"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-ecr-repository-customer-key" range="../../modules/app-ecr-repo/main.tf:7-9"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-ecr-repository-customer-key" range="../../modules/app-ecr-repo/main.tf:7-9"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-ecr-repository-customer-key" range="../../modules/app-ecr-repo/main.tf:7-9"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-ecr-repository-customer-key" range="../../modules/app-ecr-repo/main.tf:7-9"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-ecr-repository-customer-key" range="../../modules/app-ecr-repo/main.tf:7-9"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-ecr-repository-customer-key" range="../../modules/app-ecr-repo/main.tf:7-9"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-ecr-repository-customer-key" range="../../modules/app-ecr-repo/main.tf:7-9"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-ecr-repository-customer-key" range="../../modules/app-ecr-repo/main.tf:7-9"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-ecr-repository-customer-key" range="../../modules/app-ecr-repo/main.tf:7-9"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-ecr-repository-customer-key" range="../../modules/app-ecr-repo/main.tf:7-9"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-ecr-repository-customer-key" range="../../modules/app-ecr-repo/main.tf:7-9"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-ecr-repository-customer-key" range="../../modules/app-ecr-repo/main.tf:7-9"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-ecr-repository-customer-key" range="../../modules/app-ecr-repo/main.tf:7-9"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-ecr-repository-customer-key" range="../../modules/app-ecr-repo/main.tf:7-9"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-ecr-repository-customer-key" range="../../modules/app-ecr-repo/main.tf:7-9"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-ecr-repository-customer-key" range="../../modules/app-ecr-repo/main.tf:7-9"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-ecr-repository-customer-key" range="../../modules/app-ecr-repo/main.tf:7-9"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-ecr-repository-customer-key" range="../../modules/app-ecr-repo/main.tf:7-9"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-ecr-repository-customer-key" range="../../modules/app-ecr-repo/main.tf:7-9"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-ecr-repository-customer-key" range="../../modules/app-ecr-repo/main.tf:7-9"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-ecr-repository-customer-key" range="../../modules/app-ecr-repo/main.tf:7-9"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-ecr-repository-customer-key" range="../../modules/app-ecr-repo/main.tf:7-9"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-ecr-repository-customer-key" range="../../modules/app-ecr-repo/main.tf:7-9"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-ecr-repository-customer-key" range="../../modules/app-ecr-repo/main.tf:7-9"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-ecr-repository-customer-key" range="../../modules/app-ecr-repo/main.tf:7-9"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-ecr-repository-customer-key" range="../../modules/app-ecr-repo/main.tf:7-9"
2024-09-30T15:50:22Z	INFO	[terraform executor] Ignore finding	rule="aws-ecr-repository-customer-key" range="../../modules/app-ecr-repo/main.tf:7-9"
2024-09-30T15:50:22Z	INFO	Number of language-specific files	num=1
2024-09-30T15:50:22Z	INFO	[gomod] Detecting vulnerabilities...
2024-09-30T15:50:22Z	INFO	Detected config files	num=8
trivy_exitcode=0

*****************************

Running Trivy in terraform/environments/core-vpc
2024-09-30T15:50:23Z	INFO	[vuln] Vulnerability scanning is enabled
2024-09-30T15:50:23Z	INFO	[misconfig] Misconfiguration scanning is enabled
2024-09-30T15:50:23Z	INFO	[secret] Secret scanning is enabled
2024-09-30T15:50:23Z	INFO	[secret] If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2024-09-30T15:50:23Z	INFO	[secret] Please see also https://aquasecurity.github.io/trivy/v0.55/docs/scanner/secret#recommendation for faster secret detection
2024-09-30T15:50:23Z	INFO	[terraform scanner] Scanning root module	file_path="."
2024-09-30T15:50:23Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="aws_iam_role.member-delegation" value="cty.NilVal"
2024-09-30T15:50:23Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="aws_iam_role_policy.member-delegation" value="cty.NilVal"
2024-09-30T15:50:23Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.dns-zone" value="cty.NilVal"
2024-09-30T15:50:23Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.dns_zone_extend" value="cty.NilVal"
2024-09-30T15:50:23Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.dns_zone_extend_private" value="cty.NilVal"
2024-09-30T15:50:23Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.resource-share" value="cty.NilVal"
2024-09-30T15:50:23Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc" value="cty.NilVal"
2024-09-30T15:50:23Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc_attachment" value="cty.NilVal"
2024-09-30T15:50:23Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.vpc_nacls" value="cty.NilVal"
2024-09-30T15:50:23Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:23Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:23Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:23Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:23Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:23Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:48"
2024-09-30T15:50:23Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:23Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:23Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:23Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:23Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:31-50"
2024-09-30T15:50:23Z	INFO	[terraform executor] Ignore finding	rule="aws-iam-no-policy-wildcards" range="iam.tf:48"
2024-09-30T15:50:23Z	INFO	[terraform executor] Ignore finding	rule="aws-sns-enable-topic-encryption" range="monitoring.tf:9-15"
2024-09-30T15:50:23Z	INFO	Number of language-specific files	num=0
2024-09-30T15:50:23Z	INFO	Detected config files	num=3
trivy_exitcode=0

@dms1981 dms1981 added this pull request to the merge queue Sep 30, 2024
Merged via the queue into main with commit d4ed173 Sep 30, 2024
16 checks passed
@dms1981 dms1981 deleted the feature/7607-switch-from-secret-to-ssm branch September 30, 2024 16:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@ASTRobinson ASTRobinson ASTRobinson approved these changes

Assignees
No one assigned
Labels
core networking security
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@dms1981 @ASTRobinson