Addinng kms:DescribeKey for CICD member, https://github.com/hashicorp…

[harichintala1]

Fix for DEFAULT KMS Key Error, Ref: hashicorp/terraform-provider-aws#3450

[github-actions]

TFSEC Scan Success

Show Output

*****************************

TFSEC will check the following folders:
terraform/modules/iam_baseline

*****************************

Running TFSEC in terraform/modules/iam_baseline
Excluding the following checks: aws-ssm-secret-use-customer-key,github-repositories-private,aws-vpc-no-excessive-port-access,github-repositories-require-signed-commits
  timings
  ──────────────────────────────────────────
  disk i/o             46.8µs
  parsing              1.130106ms
  adaptation           1.046305ms
  checks               120.493861ms
  total                122.717072ms

  counts
  ──────────────────────────────────────────
  modules downloaded   0
  modules processed    1
  blocks processed     9
  files read           2

  results
  ──────────────────────────────────────────
  passed               5
  ignored              33
  critical             0
  high                 0
  medium               0
  low                  0


No problems detected!

tfsec_exitcode=0

Checkov Scan Success

Show Output

*****************************

Checkov will check the following folders:
terraform/modules/iam_baseline

*****************************

Running Checkov in terraform/modules/iam_baseline
Excluding the following checks: CKV_GIT_1,CKV_AWS_126,CKV2_AWS_38,CKV2_AWS_39
terraform scan results:

Passed checks: 7, Failed checks: 0, Skipped checks: 0


checkov_exitcode=0

CTFLint Scan Success

Show Output

*****************************

Setting default tflint config...
Running tflint --init...
Installing `aws` plugin...
Installed `aws` (source: github.com/terraform-linters/tflint-ruleset-aws, version: 0.17.0)
Installing `terraform` plugin...
Installed `terraform` (source: github.com/terraform-linters/tflint-ruleset-terraform, version: 0.1.0)
tflint will check the following folders:
terraform/modules/iam_baseline

*****************************

Running tflint in terraform/modules/iam_baseline
Excluding the following checks: terraform_unused_declarations
tflint_exitcode=0

[davidkelliott]

Hi @harichintala1 changes to these files will be role out across all MP accounts, what issue are you having and we can have a look at finding a solution for you?

[harichintala1]

Hi @harichintala1 changes to these files will be role out across all MP accounts, what issue are you having and we can have a look at finding a solution for you?

This is to overcome issue discussed here, hashicorp/terraform-provider-aws#3450

We have failing CircleCI pipeline here, https://app.circleci.com/pipelines/github/ministryofjustice/hmpps-digital-prison-reporting-glue-poc/43/workflows/4e0944c5-b655-4080-b967-e12367d34ec0/jobs/47

[github-actions]

TFSEC Scan Success

Show Output

*****************************

TFSEC will check the following folders:
terraform/modules/iam_baseline

*****************************

Running TFSEC in terraform/modules/iam_baseline
Excluding the following checks: aws-ssm-secret-use-customer-key,github-repositories-private,aws-vpc-no-excessive-port-access,github-repositories-require-signed-commits
  timings
  ──────────────────────────────────────────
  disk i/o             43.403µs
  parsing              1.20077ms
  adaptation           910.652µs
  checks               114.104687ms
  total                116.259512ms

  counts
  ──────────────────────────────────────────
  modules downloaded   0
  modules processed    1
  blocks processed     7
  files read           2

  results
  ──────────────────────────────────────────
  passed               1
  ignored              39
  critical             0
  high                 0
  medium               0
  low                  0


No problems detected!

tfsec_exitcode=0

Checkov Scan Success

Show Output

*****************************

Checkov will check the following folders:
terraform/modules/iam_baseline

*****************************

Running Checkov in terraform/modules/iam_baseline
Excluding the following checks: CKV_GIT_1,CKV_AWS_126,CKV2_AWS_38,CKV2_AWS_39
terraform scan results:

Passed checks: 5, Failed checks: 0, Skipped checks: 0


checkov_exitcode=0

CTFLint Scan Success

Show Output

*****************************

Setting default tflint config...
Running tflint --init...
Installing `aws` plugin...
Installed `aws` (source: github.com/terraform-linters/tflint-ruleset-aws, version: 0.17.0)
Installing `terraform` plugin...
Installed `terraform` (source: github.com/terraform-linters/tflint-ruleset-terraform, version: 0.1.0)
tflint will check the following folders:
terraform/modules/iam_baseline

*****************************

Running tflint in terraform/modules/iam_baseline
Excluding the following checks: terraform_unused_declarations
tflint_exitcode=0

[julialawrence]

Looks good.