feat(terraform): add CKV NCP rules about ncloud access control group rule

checkov/terraform/checks/graph_checks/ncp/AccessControlGroupRuleDefine.yaml

@@ -0,0 +1,17 @@
+metadata:
+  id: "CKV_NCP_26"
+  name: "Ensure Access Control Group has Access Control Group Rule attached"
+  category: "NETWORKING"
+definition:
+  and:
+    - cond_type: filter
+      attribute: resource_type
+      value:
+        - ncloud_access_control_group
+      operator: within
+    - resource_types:
+        - ncloud_access_control_group
+      connected_resource_types:
+        - ncloud_access_control_group_rule
+      operator: exists
+      cond_type: connection

tests/terraform/graph/checks/resources/AccessControlGroupRuleDefine/expected.yaml

@@ -0,0 +1,4 @@
+pass:
+  - "ncloud_access_control_group.pass"
+fail:
+  - "ncloud_access_control_group.fail"

tests/terraform/graph/checks/resources/AccessControlGroupRuleDefine/main.tf

@@ -0,0 +1,16 @@
+
+resource "ncloud_access_control_group" "pass" {
+  name        = "my-acg"
+  description = "description"
+  vpc_no      = ncloud_vpc.vpc.id
+}
+
+resource "ncloud_access_control_group_rule" "acg-rule" {
+  access_control_group_no = ncloud_access_control_group.pass.id
+}
+
+resource "ncloud_access_control_group" "fail" {
+  name        = "my-acg"
+  description = "description"
+  vpc_no      = ncloud_vpc.vpc.id
+}

tests/terraform/graph/checks/test_yaml_policies.py

@@ -23,6 +23,9 @@ def setUp(self) -> None:
         warnings.filterwarnings("ignore", category=ResourceWarning)
         warnings.filterwarnings("ignore", category=DeprecationWarning)
 
+    def test_AccessControlGroupRuleDefine(self):
+        self.go("AccessControlGroupRuleDefine")
+
     def test_ADORepositoryHasMinTwoReviewers(self):
         self.go("ADORepositoryHasMinTwoReviewers")