File tree Expand file tree Collapse file tree 2 files changed +2
-3
lines changed Expand file tree Collapse file tree 2 files changed +2
-3
lines changed Original file line number Diff line number Diff line change @@ -40,7 +40,6 @@ module "subnets" {
4040# ###----------------------------------------------------------------------------------
4141# # Memcached holds its data in memory.
4242# ###----------------------------------------------------------------------------------
43- # tfsec:ignore:aws-ec2-no-public-egress-sgr
4443module "memcached" {
4544 source = " ./../../"
4645
Original file line number Diff line number Diff line change @@ -38,6 +38,7 @@ data "aws_security_group" "existing" {
3838# #----------------------------------------------------------------------------------
3939# # Below resources will create SECURITY-GROUP-RULE and its components.
4040# #----------------------------------------------------------------------------------
41+ # tfsec:ignore:aws-ec2-no-public-egress-sgr.
4142resource "aws_security_group_rule" "egress" {
4243 count = (var. enable_security_group == true && length (var. sg_ids ) < 1 && var. is_external == false && var. egress_rule == true ) ? 1 : 0
4344
@@ -48,7 +49,7 @@ resource "aws_security_group_rule" "egress" {
4849 cidr_blocks = [" 0.0.0.0/0" ]
4950 security_group_id = join (" " , aws_security_group. default . * . id )
5051}
51- # defsec :ignore:aws-ec2-no-public-egress-sgr
52+ # tfsec :ignore:aws-ec2-no-public-egress-sgr.
5253resource "aws_security_group_rule" "egress_ipv6" {
5354 count = (var. enable_security_group == true && length (var. sg_ids ) < 1 && var. is_external == false ) && var. egress_rule == true ? 1 : 0
5455
@@ -59,7 +60,6 @@ resource "aws_security_group_rule" "egress_ipv6" {
5960 ipv6_cidr_blocks = [" ::/0" ]
6061 security_group_id = join (" " , aws_security_group. default . * . id )
6162}
62- # tfsec:ignore:aws-ec2-no-public-egress-sgr
6363resource "aws_security_group_rule" "ingress" {
6464 count = length (var. allowed_ip ) > 0 == true && length (var. sg_ids ) < 1 ? length (compact (var. allowed_ports )) : 0
6565
You can’t perform that action at this time.
0 commit comments