这是indexloc提供的服务,不要输入任何密码
Skip to content

CKV2_AWS_52 Wrong/incomplete definition #7013

@fire2

Description

@fire2

Describe the issue
The check https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-iam-policies/bc-aws-2-52 doesn't accept the following configuration as "fine-grained access control enabled":

advanced_security_options {
    enabled                        = true
    internal_user_database_enabled = false

    master_user_options {
        master_user_arn = var.cognito_authenticated_role
    }
}

Examples
See example above, this configuration should not fail the check. When applied, you can see fine-grained access control is enabled in the AWS Console:
Image

Version (please complete the following information):

Additional context

Metadata

Metadata

Assignees

No one assigned

    Labels

    checksCheck additions or changes

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions