Bump ec2_test_instance::modernisation-platform-terraform-ec2-instance from 2.2.0 to 2.3.1 in /terraform/environments/example

[dependabot]

Bumps ec2_test_instance::modernisation-platform-terraform-ec2-instance from 2.2.0 to 2.3.1.

Release notes

Sourced from ec2_test_instance::modernisation-platform-terraform-ec2-instance's releases.

v2.3.1

What's Changed

This release combines the SSM and SecretsManager policies to help minimise the number of policies on an ec2.

• Bump bridgecrewio/checkov-action from 12.2561.0 to 12.2569.0 by @​dependabot in ministryofjustice/modernisation-platform-terraform-ec2-instance#238
• combine-ssm-and-secrets by @​wullub in ministryofjustice/modernisation-platform-terraform-ec2-instance#237

Full Changelog: ministryofjustice/modernisation-platform-terraform-ec2-instance@v2.3.0...v2.3.1

v2.3.0

What's Changed

• Bump bridgecrewio/checkov-action from 12.2544.0 to 12.2547.0 by @​dependabot in ministryofjustice/modernisation-platform-terraform-ec2-instance#222
• Bump google.golang.org/grpc from 1.53.0 to 1.56.3 in /test by @​dependabot in ministryofjustice/modernisation-platform-terraform-ec2-instance#221
• workflow fix by @​markgov in ministryofjustice/modernisation-platform-terraform-ec2-instance#224
• Bump bridgecrewio/checkov-action from 12.2547.0 to 12.2552.0 by @​dependabot in ministryofjustice/modernisation-platform-terraform-ec2-instance#223
• Bump bridgecrewio/checkov-action from 12.2552.0 to 12.2553.0 by @​dependabot in ministryofjustice/modernisation-platform-terraform-ec2-instance#225
• Bump bridgecrewio/checkov-action from 12.2553.0 to 12.2556.0 by @​dependabot in ministryofjustice/modernisation-platform-terraform-ec2-instance#230
• Bump hashicorp/setup-terraform from 2.0.3 to 3.0.0 by @​dependabot in ministryofjustice/modernisation-platform-terraform-ec2-instance#227
• Bump bridgecrewio/checkov-action from 12.2556.0 to 12.2561.0 by @​dependabot in ministryofjustice/modernisation-platform-terraform-ec2-instance#233
• adding disable api stop attribute by @​haitchison in ministryofjustice/modernisation-platform-terraform-ec2-instance#234

New Contributors

• @​markgov made their first contribution in ministryofjustice/modernisation-platform-terraform-ec2-instance#224
• @​haitchison made their first contribution in ministryofjustice/modernisation-platform-terraform-ec2-instance#234

Full Changelog: ministryofjustice/modernisation-platform-terraform-ec2-instance@v2.2.0...v2.2.1

Commits

• 02a31a7 Merge pull request #237 from ministryofjustice/combine-ssm-and-secrets
• 2b98157 Merge pull request #238 from ministryofjustice/dependabot/github_actions/brid...
• 9fd68fe Update main.tf
• a48eef5 Bump bridgecrewio/checkov-action from 12.2561.0 to 12.2569.0
• 5e5a511 combine-ssm-and-secrets
• d66293c Merge pull request #234 from ministryofjustice/disable-api-stop
• c98b3c2 Commit changes made by code formatters
• a6cb5ed adding disable api stop attribute
• 595874a Merge pull request #233 from ministryofjustice/dependabot/github_actions/brid...
• 24347a0 Bump bridgecrewio/checkov-action from 12.2556.0 to 12.2561.0
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

TFSEC Scan Success

Show Output

*****************************

TFSEC will check the following folders:
terraform/environments/corporate-staff-rostering

*****************************

Running TFSEC in terraform/environments/corporate-staff-rostering
Excluding the following checks: AWS095

======================================================
tfsec is joining the Trivy family

tfsec will continue to remain available 
for the time being, although our engineering 
attention will be directed at Trivy going forward.

You can read more here: 
https://github.com/aquasecurity/tfsec/discussions/1994
======================================================
  timings
  ──────────────────────────────────────────
  disk i/o             1.49418ms
  parsing              201.541419ms
  adaptation           120.726µs
  checks               4.122042ms
  total                207.278367ms

  counts
  ──────────────────────────────────────────
  modules downloaded   0
  modules processed    5
  blocks processed     276
  files read           73

  results
  ──────────────────────────────────────────
  passed               1
  ignored              0
  critical             0
  high                 0
  medium               0
  low                  0


No problems detected!

tfsec_exitcode=0

Checkov Scan Success

Show Output

*****************************

Checkov will check the following folders:
terraform/environments/corporate-staff-rostering

*****************************

Running Checkov in terraform/environments/corporate-staff-rostering
terraform scan results:

Passed checks: 96, Failed checks: 0, Skipped checks: 19


checkov_exitcode=0

CTFLint Scan Success

Show Output

*****************************

Setting default tflint config...
Running tflint --init...
Installing `terraform` plugin...
Installed `terraform` (source: github.com/terraform-linters/tflint-ruleset-terraform, version: 0.2.1)
tflint will check the following folders:
terraform/environments/corporate-staff-rostering

*****************************

Running tflint in terraform/environments/corporate-staff-rostering
Excluding the following checks: terraform_unused_declarations
tflint_exitcode=0

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

[github-actions]

TFSEC Scan Success

Show Output

*****************************

TFSEC will check the following folders:

Checkov Scan Success

Show Output

*****************************

Checkov will check the following folders:

CTFLint Scan Success

Show Output

*****************************

Setting default tflint config...
Running tflint --init...
Installing `terraform` plugin...
Installed `terraform` (source: github.com/terraform-linters/tflint-ruleset-terraform, version: 0.2.1)
tflint will check the following folders:

[github-actions]

TFSEC Scan Success

Show Output

*****************************

TFSEC will check the following folders:

Checkov Scan Success

Show Output

*****************************

Checkov will check the following folders:

CTFLint Scan Success

Show Output

*****************************

Setting default tflint config...
Running tflint --init...
Installing `terraform` plugin...
Installed `terraform` (source: github.com/terraform-linters/tflint-ruleset-terraform, version: 0.2.1)
tflint will check the following folders:

[github-actions]

TFSEC Scan Success

Show Output

*****************************

TFSEC will check the following folders:

Checkov Scan Success

Show Output

*****************************

Checkov will check the following folders:

CTFLint Scan Success

Show Output

*****************************

Setting default tflint config...
Running tflint --init...
Installing `terraform` plugin...
Installed `terraform` (source: github.com/terraform-linters/tflint-ruleset-terraform, version: 0.2.1)
tflint will check the following folders:

[ASTRobinson]

@dependabot rebase

[github-actions]

TFSEC Scan Success

Show Output

*****************************

TFSEC will check the following folders:

Checkov Scan Success

Show Output

*****************************

Checkov will check the following folders:

CTFLint Scan Success

Show Output

*****************************

Setting default tflint config...
Running tflint --init...
Installing `terraform` plugin...
Installed `terraform` (source: github.com/terraform-linters/tflint-ruleset-terraform, version: 0.2.1)
tflint will check the following folders:

[github-actions]

TFSEC Scan Success

Show Output

*****************************

TFSEC will check the following folders:

Checkov Scan Success

Show Output

*****************************

Checkov will check the following folders:

CTFLint Scan Success

Show Output

*****************************

Setting default tflint config...
Running tflint --init...
Installing `terraform` plugin...
Installed `terraform` (source: github.com/terraform-linters/tflint-ruleset-terraform, version: 0.2.1)
tflint will check the following folders:

[github-actions]

TFSEC Scan Success

Show Output

*****************************

TFSEC will check the following folders:
terraform/environments/hmpps-domain-services terraform/environments/hmpps-domain-services/templates

*****************************

Running TFSEC in terraform/environments/hmpps-domain-services
Excluding the following checks: AWS095

======================================================
tfsec is joining the Trivy family

tfsec will continue to remain available 
for the time being, although our engineering 
attention will be directed at Trivy going forward.

You can read more here: 
https://github.com/aquasecurity/tfsec/discussions/1994
======================================================
  timings
  ──────────────────────────────────────────
  disk i/o             1.532492ms
  parsing              129.695181ms
  adaptation           108.683µs
  checks               10.823918ms
  total                142.160274ms

  counts
  ──────────────────────────────────────────
  modules downloaded   0
  modules processed    5
  blocks processed     267
  files read           71

  results
  ──────────────────────────────────────────
  passed               1
  ignored              0
  critical             0
  high                 0
  medium               0
  low                  0


No problems detected!

tfsec_exitcode=0

*****************************

Running TFSEC in terraform/environments/hmpps-domain-services/templates
Skipping folder as path name contains *templates*

Checkov Scan Failed

Show Output

*****************************

Checkov will check the following folders:
terraform/environments/hmpps-domain-services terraform/environments/hmpps-domain-services/templates

*****************************

Running Checkov in terraform/environments/hmpps-domain-services
terraform scan results:

Passed checks: 92, Failed checks: 1, Skipped checks: 19

Check: CKV_AWS_103: "Ensure that load balancer is using at least TLS 1.2"
	FAILED for resource: module.baseline.module.lb_listener.aws_lb_listener.this
	File: /../../modules/lb_listener/main.tf:1-61
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/bc-aws-general-43

		Code lines for this resource are too many. Please use IDE of your choice to review the file.

checkov_exitcode=1

*****************************

Running Checkov in terraform/environments/hmpps-domain-services/templates
Skipping folder as path name contains *templates*

CTFLint Scan Success

Show Output

*****************************

Setting default tflint config...
Running tflint --init...
Installing `terraform` plugin...
Installed `terraform` (source: github.com/terraform-linters/tflint-ruleset-terraform, version: 0.2.1)
tflint will check the following folders:
terraform/environments/hmpps-domain-services terraform/environments/hmpps-domain-services/templates

*****************************

Running tflint in terraform/environments/hmpps-domain-services
Excluding the following checks: terraform_unused_declarations
tflint_exitcode=0

*****************************

Running tflint in terraform/environments/hmpps-domain-services/templates
Skipping folder as path name contains *templates*
tflint_exitcode=0

[github-actions]

TFSEC Scan Success

Show Output

*****************************

TFSEC will check the following folders:

Checkov Scan Success

Show Output

*****************************

Checkov will check the following folders:

CTFLint Scan Success

Show Output

*****************************

Setting default tflint config...
Running tflint --init...
Installing `terraform` plugin...
Installed `terraform` (source: github.com/terraform-linters/tflint-ruleset-terraform, version: 0.2.1)
tflint will check the following folders:

[github-actions]

TFSEC Scan Success

Show Output

*****************************

TFSEC will check the following folders:
terraform/environments/planetfm

*****************************

Running TFSEC in terraform/environments/planetfm
Excluding the following checks: AWS095

======================================================
tfsec is joining the Trivy family

tfsec will continue to remain available 
for the time being, although our engineering 
attention will be directed at Trivy going forward.

You can read more here: 
https://github.com/aquasecurity/tfsec/discussions/1994
======================================================
  timings
  ──────────────────────────────────────────
  disk i/o             1.495739ms
  parsing              178.942056ms
  adaptation           106.128µs
  checks               10.746694ms
  total                191.290617ms

  counts
  ──────────────────────────────────────────
  modules downloaded   0
  modules processed    5
  blocks processed     271
  files read           71

  results
  ──────────────────────────────────────────
  passed               1
  ignored              0
  critical             0
  high                 0
  medium               0
  low                  0


No problems detected!

tfsec_exitcode=0

Checkov Scan Success

Show Output

*****************************

Checkov will check the following folders:
terraform/environments/planetfm

*****************************

Running Checkov in terraform/environments/planetfm
terraform scan results:

Passed checks: 94, Failed checks: 0, Skipped checks: 19


checkov_exitcode=0

CTFLint Scan Success

Show Output

*****************************

Setting default tflint config...
Running tflint --init...
Installing `terraform` plugin...
Installed `terraform` (source: github.com/terraform-linters/tflint-ruleset-terraform, version: 0.2.1)
tflint will check the following folders:
terraform/environments/planetfm

*****************************

Running tflint in terraform/environments/planetfm
Excluding the following checks: terraform_unused_declarations
tflint_exitcode=0