.semgrep-caps-aws-config.yml

# Generated by internal/generate/servicesemgrep/main.go; DO NOT EDIT.
rules:
  - id: aws-in-func-name
    languages:
      - go
    message: Do not use "AWS" in func name inside AWS Provider
    paths:
      include:
        - internal
    patterns:
      - pattern: func $NAME( ... ) { ... }
      - metavariable-pattern:
          metavariable: $NAME
          patterns:
            - pattern-regex: "(?i)AWS"
    severity: WARNING
  - id: aws-in-const-name
    languages:
      - go
    message: Do not use "AWS" in const name inside AWS Provider
    paths:
      include:
        - internal
    patterns:
      - pattern: const $NAME = ...
      - metavariable-pattern:
          metavariable: $NAME
          patterns:
            - pattern-regex: "(?i)AWS"
    severity: WARNING
  - id: aws-in-var-name
    languages:
      - go
    message: Do not use "AWS" in var name inside AWS Provider
    paths:
      include:
        - internal
    patterns:
      - pattern: var $NAME = ...
      - metavariable-pattern:
          metavariable: $NAME
          patterns:
            - pattern-regex: "(?i)AWS"
    severity: WARNING
  - id: caps0-in-func-name
    languages:
      - go
    message: Use correct caps in func name (i.e., HTTPS or https, not Https) (see list at https://github.com/hashicorp/terraform-provider-aws/tree/main/names/caps.md)
    paths:
      include:
        - internal
    patterns:
      - pattern: func $NAME( ... ) { ... }
      - metavariable-pattern:
          metavariable: $NAME
          patterns:
            - pattern-regex: "(Cloudformation|ElasticSearch|Autoscaling|Elasticache|ApiGateway|Cloudfront|Cloudwatch|Workspaces|Appconfig|Guardduty|Sagemaker|Workgroup|DynamoDb|Dynamodb|Gamelift|Opsworks|Precheck|Rabbitmq|Worklink|Appmesh|Appsync)"
    severity: WARNING
  - id: caps0-in-const-name
    languages:
      - go
    message: Use correct caps in const name (i.e., HTTPS or https, not Https) (see list at https://github.com/hashicorp/terraform-provider-aws/tree/main/names/caps.md)
    paths:
      include:
        - internal
    patterns:
      - pattern: const $NAME = ...
      - metavariable-pattern:
          metavariable: $NAME
          patterns:
            - pattern-regex: "(Cloudformation|ElasticSearch|Autoscaling|Elasticache|ApiGateway|Cloudfront|Cloudwatch|Workspaces|Appconfig|Guardduty|Sagemaker|Workgroup|DynamoDb|Dynamodb|Gamelift|Opsworks|Precheck|Rabbitmq|Worklink|Appmesh|Appsync)"
    severity: WARNING
  - id: caps0-in-var-name
    languages:
      - go
    message: Use correct caps in var name (i.e., HTTPS or https, not Https) (see list at https://github.com/hashicorp/terraform-provider-aws/tree/main/names/caps.md)
    paths:
      include:
        - internal
    patterns:
      - pattern: var $NAME = ...
      - metavariable-pattern:
          metavariable: $NAME
          patterns:
          - pattern-regex: "(Cloudformation|ElasticSearch|Autoscaling|Elasticache|ApiGateway|Cloudfront|Cloudwatch|Workspaces|Appconfig|Guardduty|Sagemaker|Workgroup|DynamoDb|Dynamodb|Gamelift|Opsworks|Precheck|Rabbitmq|Worklink|Appmesh|Appsync)"
    severity: WARNING
  - id: caps1-in-func-name
    languages:
      - go
    message: Use correct caps in func name (i.e., HTTPS or https, not Https) (see list at https://github.com/hashicorp/terraform-provider-aws/tree/main/names/caps.md)
    paths:
      include:
        - internal
    patterns:
      - pattern: func $NAME( ... ) { ... }
      - metavariable-pattern:
          metavariable: $NAME
          patterns:
            - pattern-regex: "(Graphql|Haproxy|AcmPca|Acmpca|Dnssec|Byoip|Cname|DocDb|Docdb|Fqdns|Https|Ipset|Iscsi|Mysql|Oauth|Posix|Wafv2|Cidr|Coip|Dhcp|Dkim)"
    severity: WARNING
  - id: caps1-in-const-name
    languages:
      - go
    message: Use correct caps in const name (i.e., HTTPS or https, not Https) (see list at https://github.com/hashicorp/terraform-provider-aws/tree/main/names/caps.md)
    paths:
      include:
        - internal
    patterns:
      - pattern: const $NAME = ...
      - metavariable-pattern:
          metavariable: $NAME
          patterns:
            - pattern-regex: "(Graphql|Haproxy|AcmPca|Acmpca|Dnssec|Byoip|Cname|DocDb|Docdb|Fqdns|Https|Ipset|Iscsi|Mysql|Oauth|Posix|Wafv2|Cidr|Coip|Dhcp|Dkim)"
    severity: WARNING
  - id: caps1-in-var-name
    languages:
      - go
    message: Use correct caps in var name (i.e., HTTPS or https, not Https) (see list at https://github.com/hashicorp/terraform-provider-aws/tree/main/names/caps.md)
    paths:
      include:
        - internal
    patterns:
      - pattern: var $NAME = ...
      - metavariable-pattern:
          metavariable: $NAME
          patterns:
          - pattern-regex: "(Graphql|Haproxy|AcmPca|Acmpca|Dnssec|Byoip|Cname|DocDb|Docdb|Fqdns|Https|Ipset|Iscsi|Mysql|Oauth|Posix|Wafv2|Cidr|Coip|Dhcp|Dkim)"
    severity: WARNING
  - id: caps2-in-func-name
    languages:
      - go
    message: Use correct caps in func name (i.e., HTTPS or https, not Https) (see list at https://github.com/hashicorp/terraform-provider-aws/tree/main/names/caps.md)
    paths:
      include:
        - internal
    patterns:
      - pattern: func $NAME( ... ) { ... }
      - metavariable-pattern:
          metavariable: $NAME
          patterns:
            - pattern-regex: "(Ecmp|Fifo|Grpc|Http|Ipam|Jdbc|Json|Mwaa|Oidc|Pitr|Qldb|Sasl|Smtp|Voip|Xray|Yaml|Acl|Acm|Ami|Api|Arn)"
    severity: WARNING
  - id: caps2-in-const-name
    languages:
      - go
    message: Use correct caps in const name (i.e., HTTPS or https, not Https) (see list at https://github.com/hashicorp/terraform-provider-aws/tree/main/names/caps.md)
    paths:
      include:
        - internal
    patterns:
      - pattern: const $NAME = ...
      - metavariable-pattern:
          metavariable: $NAME
          patterns:
            - pattern-regex: "(Ecmp|Fifo|Grpc|Http|Ipam|Jdbc|Json|Mwaa|Oidc|Pitr|Qldb|Sasl|Smtp|Voip|Xray|Yaml|Acl|Acm|Ami|Api|Arn)"
    severity: WARNING
  - id: caps2-in-var-name
    languages:
      - go
    message: Use correct caps in var name (i.e., HTTPS or https, not Https) (see list at https://github.com/hashicorp/terraform-provider-aws/tree/main/names/caps.md)
    paths:
      include:
        - internal
    patterns:
      - pattern: var $NAME = ...
      - metavariable-pattern:
          metavariable: $NAME
          patterns:
          - pattern-regex: "(Ecmp|Fifo|Grpc|Http|Ipam|Jdbc|Json|Mwaa|Oidc|Pitr|Qldb|Sasl|Smtp|Voip|Xray|Yaml|Acl|Acm|Ami|Api|Arn)"
    severity: WARNING
  - id: caps3-in-func-name
    languages:
      - go
    message: Use correct caps in func name (i.e., HTTPS or https, not Https) (see list at https://github.com/hashicorp/terraform-provider-aws/tree/main/names/caps.md)
    paths:
      include:
        - internal
    patterns:
      - pattern: func $NAME( ... ) { ... }
      - metavariable-pattern:
          metavariable: $NAME
          patterns:
            - pattern-regex: "(Asg|Asn|Bgp|Cmk|Cpu|Css|Csv|Dax|Dlm|Dms|Dns|Ebs|Ec2|Ecr|Ecs|Efs|Eip|Eks|Elb|Emr|FSX)"
    severity: WARNING
  - id: caps3-in-const-name
    languages:
      - go
    message: Use correct caps in const name (i.e., HTTPS or https, not Https) (see list at https://github.com/hashicorp/terraform-provider-aws/tree/main/names/caps.md)
    paths:
      include:
        - internal
    patterns:
      - pattern: const $NAME = ...
      - metavariable-pattern:
          metavariable: $NAME
          patterns:
            - pattern-regex: "(Asg|Asn|Bgp|Cmk|Cpu|Css|Csv|Dax|Dlm|Dms|Dns|Ebs|Ec2|Ecr|Ecs|Efs|Eip|Eks|Elb|Emr|FSX)"
    severity: WARNING
  - id: caps3-in-var-name
    languages:
      - go
    message: Use correct caps in var name (i.e., HTTPS or https, not Https) (see list at https://github.com/hashicorp/terraform-provider-aws/tree/main/names/caps.md)
    paths:
      include:
        - internal
    patterns:
      - pattern: var $NAME = ...
      - metavariable-pattern:
          metavariable: $NAME
          patterns:
          - pattern-regex: "(Asg|Asn|Bgp|Cmk|Cpu|Css|Csv|Dax|Dlm|Dms|Dns|Ebs|Ec2|Ecr|Ecs|Efs|Eip|Eks|Elb|Emr|FSX)"
    severity: WARNING
  - id: caps4-in-func-name
    languages:
      - go
    message: Use correct caps in func name (i.e., HTTPS or https, not Https) (see list at https://github.com/hashicorp/terraform-provider-aws/tree/main/names/caps.md)
    paths:
      include:
        - internal
    patterns:
      - pattern: func $NAME( ... ) { ... }
      - metavariable-pattern:
          metavariable: $NAME
          patterns:
            - pattern-regex: "(Fms|Fsx|Gcm|Gp2|Gp3|Hsm|Hvm|Iam|Iot|Kms|Mfa|Msk|Nfs|Php|Rds|Rfc|Sfn|Smb|Sms|Sns|Sql)"
    severity: WARNING
  - id: caps4-in-const-name
    languages:
      - go
    message: Use correct caps in const name (i.e., HTTPS or https, not Https) (see list at https://github.com/hashicorp/terraform-provider-aws/tree/main/names/caps.md)
    paths:
      include:
        - internal
    patterns:
      - pattern: const $NAME = ...
      - metavariable-pattern:
          metavariable: $NAME
          patterns:
            - pattern-regex: "(Fms|Fsx|Gcm|Gp2|Gp3|Hsm|Hvm|Iam|Iot|Kms|Mfa|Msk|Nfs|Php|Rds|Rfc|Sfn|Smb|Sms|Sns|Sql)"
    severity: WARNING
  - id: caps4-in-var-name
    languages:
      - go
    message: Use correct caps in var name (i.e., HTTPS or https, not Https) (see list at https://github.com/hashicorp/terraform-provider-aws/tree/main/names/caps.md)
    paths:
      include:
        - internal
    patterns:
      - pattern: var $NAME = ...
      - metavariable-pattern:
          metavariable: $NAME
          patterns:
          - pattern-regex: "(Fms|Fsx|Gcm|Gp2|Gp3|Hsm|Hvm|Iam|Iot|Kms|Mfa|Msk|Nfs|Php|Rds|Rfc|Sfn|Smb|Sms|Sns|Sql)"
    severity: WARNING
  - id: caps5-in-func-name
    languages:
      - go
    message: Use correct caps in func name (i.e., HTTPS or https, not Https) (see list at https://github.com/hashicorp/terraform-provider-aws/tree/main/names/caps.md)
    paths:
      include:
        - internal
    patterns:
      - pattern: func $NAME( ... ) { ... }
      - metavariable-pattern:
          metavariable: $NAME
          patterns:
            - pattern-regex: "(Sqs|Ssh|Ssl|Ssm|Sso|Sts|Swf|Tcp|Tls|Ttl|Uri|Url|Vgw|Vpc|Vpn|Waf|Xss|Db|Ip)"
    severity: WARNING
  - id: caps5-in-const-name
    languages:
      - go
    message: Use correct caps in const name (i.e., HTTPS or https, not Https) (see list at https://github.com/hashicorp/terraform-provider-aws/tree/main/names/caps.md)
    paths:
      include:
        - internal
    patterns:
      - pattern: const $NAME = ...
      - metavariable-pattern:
          metavariable: $NAME
          patterns:
            - pattern-regex: "(Sqs|Ssh|Ssl|Ssm|Sso|Sts|Swf|Tcp|Tls|Ttl|Uri|Url|Vgw|Vpc|Vpn|Waf|Xss|Db|Ip)"
    severity: WARNING
  - id: caps5-in-var-name
    languages:
      - go
    message: Use correct caps in var name (i.e., HTTPS or https, not Https) (see list at https://github.com/hashicorp/terraform-provider-aws/tree/main/names/caps.md)
    paths:
      include:
        - internal
    patterns:
      - pattern: var $NAME = ...
      - metavariable-pattern:
          metavariable: $NAME
          patterns:
          - pattern-regex: "(Sqs|Ssh|Ssl|Ssm|Sso|Sts|Swf|Tcp|Tls|Ttl|Uri|Url|Vgw|Vpc|Vpn|Waf|Xss|Db|Ip)"
    severity: WARNING
  - id: ec2-in-func-name
    languages:
      - go
    message: Do not use "EC2" in func name inside ec2 package
    paths:
      include:
        - internal/service/ec2
    patterns:
      - pattern: func $NAME( ... ) { ... }
      - metavariable-pattern:
          metavariable: $NAME
          patterns:
            - pattern-regex: "(?i)EC2"
            - pattern-not-regex: ^TestAcc.*
    severity: WARNING
  - id: ec2-in-const-name
    languages:
      - go
    message: Do not use "EC2" in const name inside ec2 package
    paths:
      include:
        - internal/service/ec2
    patterns:
      - pattern: const $NAME = ...
      - metavariable-pattern:
          metavariable: $NAME
          patterns:
            - pattern-regex: "(?i)EC2"
    severity: WARNING
  - id: ec2-in-var-name
    languages:
      - go
    message: Do not use "EC2" in var name inside ec2 package
    paths:
      include:
        - internal/service/ec2
    patterns:
      - pattern: var $NAME = ...
      - metavariable-pattern:
          metavariable: $NAME
          patterns:
            - pattern-regex: "(?i)EC2"
    severity: WARNING
  - id: test-config-funcs-correct-form
    languages:
      - go
    message: "Config funcs should follow form testAcc<Resource>Config_<testDetail>"
    paths:
      include:
        - internal/service/**/*_test.go
      exclude:
        - internal/service/accessanalyzer
        - internal/service/account
        - internal/service/acmpca
        - internal/service/amp
        - internal/service/amplify
        - internal/service/apigateway
        - internal/service/apigatewayv2
        - internal/service/appautoscaling
        - internal/service/appconfig
        - internal/service/appflow
        - internal/service/appmesh
        - internal/service/appstream
        - internal/service/autoscaling
        - internal/service/budgets
        - internal/service/ce
        - internal/service/chime
        - internal/service/cloudcontrol
        - internal/service/cloudfront
        - internal/service/cloudhsmv2
        - internal/service/cloudsearch
        - internal/service/cloudtrail
        - internal/service/cloudwatch
        - internal/service/codecommit
        - internal/service/codepipeline
        - internal/service/codestarconnections
        - internal/service/codestarnotifications
        - internal/service/cognitoidp
        - internal/service/configservice
        - internal/service/datasync
        - internal/service/dax
        - internal/service/directconnect
        - internal/service/dms
        - internal/service/dynamodb
        - internal/service/ecr
        - internal/service/ecrpublic
        - internal/service/ecs
        - internal/service/efs
        - internal/service/elasticache
        - internal/service/elasticbeanstalk
        - internal/service/elasticsearch
        - internal/service/elb
        - internal/service/elbv2
        - internal/service/emrcontainers
        - internal/service/events
        - internal/service/glacier
        - internal/service/globalaccelerator
        - internal/service/grafana
        - internal/service/guardduty
        - internal/service/iam
        - internal/service/identitystore
        - internal/service/iot
        - internal/service/kinesis
        - internal/service/kinesisanalyticsv2
        - internal/service/lambda
        - internal/service/meta
        - internal/service/networkmanager
        - internal/service/organizations
        - internal/service/ram
        - internal/service/resourcegroups
        - internal/service/resourcegroupstaggingapi
        - internal/service/route53domains
        - internal/service/route53recoverycontrolconfig
        - internal/service/route53recoveryreadiness
        - internal/service/s3
        - internal/service/s3control
        - internal/service/s3outposts
        - internal/service/servicequotas
    patterns:
      - pattern-inside: "[]resource.TestStep{ ... }"
      - pattern: "{..., $KEY:$VALUE, ...}"
      - metavariable-pattern:
          metavariable: "$KEY"
          patterns:
            - pattern: "Config"
      - metavariable-pattern:
          metavariable: "$VALUE"
          patterns:
            - pattern-not-regex: "testAcc[a-zA-Z0-9]+Config_.*"
    severity: WARNING
  - id: test-config-funcs-check
    languages:
      - go
    message: "Config funcs should not begin with 'testAccCheck'"
    paths:
      include:
        - internal/service/**/*_test.go
    patterns:
      - pattern-inside: "[]resource.TestStep{ ... }"
      - pattern: "{..., $KEY:$VALUE, ...}"
      - metavariable-pattern:
          metavariable: "$KEY"
          patterns:
            - pattern: "Config"
      - metavariable-pattern:
          metavariable: "$VALUE"
          patterns:
            - pattern-regex: "testAccCheck.*"
    severity: WARNING