appvia · gambol99 · Feb 28, 2025 · Jan 27, 2025
diff --git a/modules/notify/main.tf b/modules/notify/main.tf
@@ -32,7 +32,7 @@ resource "aws_sns_topic_subscription" "sns_notify_teams" {
 module "lambda" {
   for_each = local.distributions
   source   = "terraform-aws-modules/lambda/aws"
-  version  = "7.20.0"
+  version  = "7.20.1"
 
   architectures                      = [var.architecture]
   attach_cloudwatch_logs_policy      = true

diff --git a/data.tf b/data.tf
 data "aws_partition" "current" {}

 ## Provision an SNS IAM policy allowing the account root
 data "aws_iam_policy_document" "current" {
  statement {
    sid    = "AllowAccountRoot"
    effect = "Allow"
diff --git a/main.tf b/main.tf

 ## Provision a SQS queue if required
 ## Provision the SNS topic for the budgets
 module "sns" {
  count   = var.create_sns_topic ? 1 : 0
  source  = "terraform-aws-modules/sns/aws"
  version = "6.1.2"
	data "aws_partition" "current" {}

	## Provision an SNS IAM policy allowing the account root
	data "aws_iam_policy_document" "current" {
Check failure on line 12 in data.tf GitHub Actions / Module Validation / Static Security Analysis - Checkov `CKV_AWS_356: "Ensure no IAM policies documents allow "" as a statement's resource for restrictable actions"` Check failure on line 12 in data.tf GitHub Actions / Module Validation / Static Security Analysis - Checkov `CKV_AWS_111: "Ensure IAM policies does not allow write access without constraints"` Check failure on line 12 in data.tf GitHub Actions / Module Validation / Static Security Analysis - Checkov `CKV_AWS_356: "Ensure no IAM policies documents allow "" as a statement's resource for restrictable actions"` Check failure on line 12 in data.tf GitHub Actions / Module Validation / Static Security Analysis - Checkov `CKV_AWS_111: "Ensure IAM policies does not allow write access without constraints"` Check failure on line 12 in data.tf GitHub Actions / Module Validation / Static Security Analysis - Checkov `CKV_AWS_356: "Ensure no IAM policies documents allow "*" as a statement's resource for restrictable actions"` Check failure on line 12 in data.tf GitHub Actions / Module Validation / Static Security Analysis - Checkov `CKV_AWS_111: "Ensure IAM policies does not allow write access without constraints"`
	statement {
	sid = "AllowAccountRoot"
	effect = "Allow"

	## Provision a SQS queue if required
	## Provision the SNS topic for the budgets
	module "sns" {
Check failure on line 4 in main.tf GitHub Actions / Module Validation / Static Security Analysis - Checkov `CKV_TF_1: "Ensure Terraform module sources use a commit hash"` Check failure on line 4 in main.tf GitHub Actions / Module Validation / Static Security Analysis - Checkov `CKV_TF_1: "Ensure Terraform module sources use a commit hash"` Check failure on line 4 in main.tf GitHub Actions / Module Validation / Static Security Analysis - Checkov `CKV_TF_1: "Ensure Terraform module sources use a commit hash"` Check failure on line 4 in main.tf GitHub Actions / Module Validation / Static Security Analysis - Checkov `CKV_TF_1: "Ensure Terraform module sources use a commit hash"`
	count = var.create_sns_topic ? 1 : 0
	source = "terraform-aws-modules/sns/aws"
	version = "6.1.2"