Fix NSGRulePortAccessRestricted crashing on a terraform dynamic block (…

…#489) * Fix NSGRulePortAccessRestricted crashing on a terraform dynamic block See issue: #488 * More appropriate return code * One more try... Looking at the rest of the code, seems CheckResult.UNKNOWN is probably more suitable. * Reduced scope Co-authored-by: David Nicoll <[email protected]>
bridgecrewio · Aug 19, 2020 · ce003bf · ce003bf
1 parent e5b4a65
commit ce003bf
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/checkov/terraform/checks/resource/azure/NSGRulePortAccessRestricted.py b/checkov/terraform/checks/resource/azure/NSGRulePortAccessRestricted.py
@@ -26,6 +26,9 @@ def is_port_in_range(self, conf):
         return False
 
     def scan_resource_conf(self, conf):
+        if "dynamic" in conf:
+            return CheckResult.UNKNOWN
+
         rule_confs = [conf]
         if 'security_rule' in conf:
             rule_confs = conf['security_rule']