Update terraform-aws-modules/lambda/aws requirement from ~> 6.0 to ~> 7.14 in /terraform/environments/data-platform-apps-and-tools #8201

dependabot · 2024-10-14T00:33:02Z

Updates the requirements on terraform-aws-modules/lambda/aws to permit the latest version.

Release notes

Sourced from terraform-aws-modules/lambda/aws's releases.

v7.14.0

7.14.0 (2024-10-11)

Features

Support lambda function vpc_config.ipv6_allowed_for_dual_stack and event source mapping tags (#628) (2a602f9)

Bug Fixes

Update CI workflow versions to latest (#631) (d06718f)

Changelog

Sourced from terraform-aws-modules/lambda/aws's changelog.

7.14.0 (2024-10-11)

Features

Support lambda function vpc_config.ipv6_allowed_for_dual_stack and event source mapping tags (#628) (2a602f9)

Bug Fixes

Update CI workflow versions to latest (#631) (d06718f)

7.13.0 (2024-10-05)

Features

Support aws_lambda_event_source_mapping.document_db_event_source_config (#626) (5d48199)

7.12.0 (2024-10-05)

Features

Add support for kafka event source config (#617) (2c077cb)

7.11.0 (2024-10-01)

Features

Add function_url_auth_type option to aws_lambda_permission (#625) (9f13397)

7.10.0 (2024-09-29)

Features

Add tumbling_window_in_seconds (#623) (eedacff)

7.9.0 (2024-09-10)

Features

Added more examples for Rust, Go, Java runtimes (#612) (a6fe411)

7.8.1 (2024-08-23)

... (truncated)

Commits

00a7172 chore(release): version 7.14.0 [skip ci]
2a602f9 feat: Support lambda function vpc_config.ipv6_allowed_for_dual_stack and ev...
d06718f fix: Update CI workflow versions to latest (#631)
7bd028b chore(release): version 7.13.0 [skip ci]
5d48199 feat: Support `aws_lambda_event_source_mapping.document_db_event_source_confi...
9be9b1a chore(release): version 7.12.0 [skip ci]
2c077cb feat: Add support for kafka event source config (#617)
aa94b91 chore(release): version 7.11.0 [skip ci]
9f13397 feat: Add function_url_auth_type option to aws_lambda_permission (#625)
520c845 chore(release): version 7.10.0 [skip ci]
Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

… 7.14 Updates the requirements on [terraform-aws-modules/lambda/aws](https://github.com/terraform-aws-modules/terraform-aws-lambda) to permit the latest version. - [Release notes](https://github.com/terraform-aws-modules/terraform-aws-lambda/releases) - [Changelog](https://github.com/terraform-aws-modules/terraform-aws-lambda/blob/master/CHANGELOG.md) - [Commits](terraform-aws-modules/terraform-aws-lambda@v6.0.0...v7.14.0) --- updated-dependencies: - dependency-name: terraform-aws-modules/lambda/aws dependency-type: direct:production ... Signed-off-by: dependabot[bot] <[email protected]>

github-actions · 2024-10-14T00:34:45Z

`Trivy Scan` Success

Show Output

```hcl

Trivy will check the following folders:
terraform/environments/data-platform-apps-and-tools

Running Trivy in terraform/environments/data-platform-apps-and-tools
2024-10-14T00:34:20Z INFO [vulndb] Need to update DB
2024-10-14T00:34:20Z INFO [vulndb] Downloading vulnerability DB...
2024-10-14T00:34:20Z INFO [vulndb] Downloading artifact... repo="ghcr.io/aquasecurity/trivy-db:2"
2024-10-14T00:34:23Z INFO [vulndb] Artifact successfully downloaded repo="ghcr.io/aquasecurity/trivy-db:2"
2024-10-14T00:34:23Z INFO [vuln] Vulnerability scanning is enabled
2024-10-14T00:34:23Z INFO [misconfig] Misconfiguration scanning is enabled
2024-10-14T00:34:23Z INFO [misconfig] Need to update the built-in checks
2024-10-14T00:34:23Z INFO [misconfig] Downloading the built-in checks...
156.02 KiB / 156.02 KiB [---------------------------------------------------------] 100.00% ? p/s 0s2024-10-14T00:34:23Z INFO [secret] Secret scanning is enabled
2024-10-14T00:34:23Z INFO [secret] If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2024-10-14T00:34:23Z INFO [secret] Please see also https://aquasecurity.github.io/trivy/v0.56/docs/scanner/secret#recommendation for faster secret detection
2024-10-14T00:34:25Z INFO [terraform scanner] Scanning root module file_path="."
2024-10-14T00:34:25Z WARN [terraform parser] Variable values was not found in the environment or variable files. Evaluating may not work correctly. module="root" variables="networking"
2024-10-14T00:34:25Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="data.aws_subnet.private" value="cty.NilVal"
2024-10-14T00:34:25Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.auth0_log_streams" value="cty.NilVal"
2024-10-14T00:34:34Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.airflow_s3_bucket.dynamic.expiration" value="cty.NilVal"
2024-10-14T00:34:34Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.airflow_s3_bucket.dynamic.transition" value="cty.NilVal"
2024-10-14T00:34:34Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.airflow_s3_bucket.dynamic.noncurrent_version_expiration" value="cty.NilVal"
2024-10-14T00:34:34Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.airflow_s3_bucket.dynamic.noncurrent_version_transition" value="cty.NilVal"
2024-10-14T00:34:34Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.airflow_s3_bucket.dynamic.principals" value="cty.NilVal"
2024-10-14T00:34:34Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.airflow_s3_bucket.dynamic.condition" value="cty.NilVal"
2024-10-14T00:34:34Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.airflow_s3_bucket.dynamic.expiration" value="cty.NilVal"
2024-10-14T00:34:34Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.airflow_s3_bucket.dynamic.transition" value="cty.NilVal"
2024-10-14T00:34:34Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.airflow_s3_bucket.dynamic.noncurrent_version_expiration" value="cty.NilVal"
2024-10-14T00:34:34Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.airflow_s3_bucket.dynamic.noncurrent_version_transition" value="cty.NilVal"
2024-10-14T00:34:34Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.airflow_s3_bucket.dynamic.principals" value="cty.NilVal"
2024-10-14T00:34:34Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.airflow_s3_bucket.dynamic.condition" value="cty.NilVal"
2024-10-14T00:34:34Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.cluster_autoscaler_role.dynamic.statement" value="cty.NilVal"
2024-10-14T00:34:34Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.cluster_autoscaler_role.dynamic.statement" value="cty.NilVal"
2024-10-14T00:34:34Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.datahub_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:34Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.datahub_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:34Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.datahub_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:34Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.datahub_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:34Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.datahub_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:34Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.datahub_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:34Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.datahub_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:34Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.datahub_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:34Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.datahub_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:34Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.datahub_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:34Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.datahub_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:34Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.datahub_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:34Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.datahub_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:34Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.datahub_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:34Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.datahub_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:34Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.datahub_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:34Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.datahub_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:34Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.datahub_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:34Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.datahub_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:34Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.datahub_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:34Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.datahub_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:34Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.datahub_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:34Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.datahub_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:34Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.datahub_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:34Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.datahub_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:34Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.datahub_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:34Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.datahub_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:34Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.datahub_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:34Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.eks.aws_ec2_tag.cluster_primary_security_group" value="cty.NilVal"
2024-10-14T00:34:35Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.eks.module.kms.dynamic.statement" value="cty.NilVal"
2024-10-14T00:34:35Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.eks.module.kms.dynamic.statement" value="cty.NilVal"
2024-10-14T00:34:35Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.eks.module.kms.dynamic.statement" value="cty.NilVal"
2024-10-14T00:34:35Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.eks.module.kms.dynamic.statement" value="cty.NilVal"
2024-10-14T00:34:35Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.eks.module.kms.dynamic.statement" value="cty.NilVal"
2024-10-14T00:34:35Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.eks.module.kms.dynamic.statement" value="cty.NilVal"
2024-10-14T00:34:35Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.eks.module.eks_managed_node_group["general"].aws_iam_role_policy_attachment.this" value="cty.NilVal"
2024-10-14T00:34:35Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.cluster_autoscaler_role.dynamic.statement" value="cty.NilVal"
2024-10-14T00:34:35Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.cluster_autoscaler_role.dynamic.statement" value="cty.NilVal"
2024-10-14T00:34:35Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.openmetadata_airflow_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:35Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.openmetadata_airflow_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:35Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.openmetadata_airflow_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:35Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.openmetadata_airflow_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:35Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.openmetadata_airflow_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:35Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.openmetadata_airflow_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:35Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.openmetadata_airflow_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:35Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.openmetadata_airflow_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:37Z INFO [terraform executor] Ignore finding rule="aws-eks-no-public-cluster-access" range="git::https:/github.com/terraform-aws-modules/terraform-aws-eks?ref=2cb1fac31b0fc2dd6a236b0c0678df75819c5a3b/main.tf:37"
2024-10-14T00:34:37Z INFO [terraform executor] Ignore finding rule="aws-s3-encryption-customer-key" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=v7.1.0/main.tf:171-179"
2024-10-14T00:34:37Z INFO [terraform executor] Ignore finding rule="aws-eks-no-public-cluster-access-to-cidr" range="git::https:/github.com/terraform-aws-modules/terraform-aws-eks?ref=2cb1fac31b0fc2dd6a236b0c0678df75819c5a3b/main.tf:38"
2024-10-14T00:34:37Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-egress-sgr" range="git::https:/github.com/terraform-aws-modules/terraform-aws-eks?ref=2cb1fac31b0fc2dd6a236b0c0678df75819c5a3b/node_groups.tf:223"
2024-10-14T00:34:37Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-egress-sgr" range="terraform-aws-modules/security-group/aws/main.tf:533"
2024-10-14T00:34:37Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-egress-sgr" range="terraform-aws-modules/security-group/aws/main.tf:534"
2024-10-14T00:34:37Z WARN [pip] Unable to find python site-packages directory. License detection is skipped. err="site-packages directory not found"
2024-10-14T00:34:37Z INFO Number of language-specific files num=1
2024-10-14T00:34:37Z INFO [pip] Detecting vulnerabilities...
2024-10-14T00:34:37Z INFO Detected config files num=12
trivy_exitcode=0

</details> #### `Checkov Scan` Failed
<details><summary>Show Output</summary>

```hcl

*****************************

Checkov will check the following folders:
terraform/environments/data-platform-apps-and-tools

*****************************

Running Checkov in terraform/environments/data-platform-apps-and-tools
Excluding the following checks: CKV_GIT_1,CKV_AWS_126,CKV2_AWS_38,CKV2_AWS_39
2024-10-14 00:34:40,899 [MainThread  ] [WARNI]  Failed to download module terraform-aws-modules/kms/aws:~> 2.0 (for external modules, the --download-external-modules flag is required)
2024-10-14 00:34:40,899 [MainThread  ] [WARNI]  Failed to download module terraform-aws-modules/iam/aws//modules/iam-role-for-service-accounts-eks:~> 5.0 (for external modules, the --download-external-modules flag is required)
2024-10-14 00:34:40,899 [MainThread  ] [WARNI]  Failed to download module terraform-aws-modules/cloudwatch/aws//modules/log-group:~> 5.0 (for external modules, the --download-external-modules flag is required)
2024-10-14 00:34:40,899 [MainThread  ] [WARNI]  Failed to download module terraform-aws-modules/ec2-instance/aws:None (for external modules, the --download-external-modules flag is required)
2024-10-14 00:34:40,900 [MainThread  ] [WARNI]  Failed to download module terraform-aws-modules/rds/aws:~> 6.0 (for external modules, the --download-external-modules flag is required)
2024-10-14 00:34:40,900 [MainThread  ] [WARNI]  Failed to download module terraform-aws-modules/iam/aws//modules/iam-policy:~> 5.0 (for external modules, the --download-external-modules flag is required)
2024-10-14 00:34:40,900 [MainThread  ] [WARNI]  Failed to download module terraform-aws-modules/iam/aws//modules/iam-user:~> 5 (for external modules, the --download-external-modules flag is required)
2024-10-14 00:34:40,900 [MainThread  ] [WARNI]  Failed to download module github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=v7.1.0:None (for external modules, the --download-external-modules flag is required)
2024-10-14 00:34:40,900 [MainThread  ] [WARNI]  Failed to download module terraform-aws-modules/iam/aws//modules/iam-assumable-role:~> 5.0 (for external modules, the --download-external-modules flag is required)
2024-10-14 00:34:40,900 [MainThread  ] [WARNI]  Failed to download module terraform-aws-modules/efs/aws:~> 1.0 (for external modules, the --download-external-modules flag is required)
2024-10-14 00:34:40,900 [MainThread  ] [WARNI]  Failed to download module ministryofjustice/observability-platform-tenant/aws:1.0.1 (for external modules, the --download-external-modules flag is required)
2024-10-14 00:34:40,900 [MainThread  ] [WARNI]  Failed to download module terraform-aws-modules/vpc/aws//modules/vpc-endpoints:~> 5.0 (for external modules, the --download-external-modules flag is required)
2024-10-14 00:34:40,901 [MainThread  ] [WARNI]  Failed to download module terraform-aws-modules/security-group/aws:~> 5.0 (for external modules, the --download-external-modules flag is required)
2024-10-14 00:34:40,901 [MainThread  ] [WARNI]  Failed to download module terraform-aws-modules/eks/aws:19.21.0 (for external modules, the --download-external-modules flag is required)
2024-10-14 00:34:40,901 [MainThread  ] [WARNI]  Failed to download module terraform-aws-modules/lambda/aws:~> 7.14 (for external modules, the --download-external-modules flag is required)
2024-10-14 00:34:40,901 [MainThread  ] [WARNI]  Failed to download module terraform-aws-modules/vpc/aws:~> 5.0 (for external modules, the --download-external-modules flag is required)
2024-10-14 00:34:40,901 [MainThread  ] [WARNI]  Failed to download module terraform-aws-modules/kms/aws:2.2.0 (for external modules, the --download-external-modules flag is required)
2024-10-14 00:34:41,348 [MainThread  ] [WARNI]  Fail to load yaml content, while scanning for the next token
found character '@' that cannot start any token
  in "<unicode string>", line 19, column 48:
     ... : {{ .Values.image.repository }}@sha256:{{ .Values.image.sha }}
                                         ^
terraform scan results:

Passed checks: 169, Failed checks: 20, Skipped checks: 43

Check: CKV_AWS_149: "Ensure that Secrets Manager secret is encrypted using KMS CMK"
	FAILED for resource: aws_secretsmanager_secret.powerbi_gateway_reg_credentials
	File: /powerbi-gateway-secret.tf:1-3
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/ensure-that-secrets-manager-secret-is-encrypted-using-kms

		1 | resource "aws_secretsmanager_secret" "powerbi_gateway_reg_credentials" {
		2 |   name = "${local.environment_configuration.powerbi_gateway_ec2.instance_name}-credentials"
		3 | }

Check: CKV_AWS_23: "Ensure every security group and rule has a description"
	FAILED for resource: aws_security_group.powerbi_gateway
	File: /powerbi-gateway-security-group.tf:2-30
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-networking-policies/networking-31

		2  | resource "aws_security_group" "powerbi_gateway" {
		3  |   name        = local.environment_configuration.powerbi_gateway_ec2.instance_name
		4  |   description = local.environment_configuration.powerbi_gateway_ec2.instance_name
		5  |   vpc_id      = data.aws_vpc.shared.id
		6  | 
		7  |   # https://learn.microsoft.com/en-us/data-integration/gateway/service-gateway-communication#ports
		8  |   egress {
		9  |     from_port   = 443
		10 |     to_port     = 443
		11 |     protocol    = "tcp"
		12 |     cidr_blocks = ["0.0.0.0/0"]
		13 |   }
		14 | 
		15 |   egress {
		16 |     from_port   = 5671
		17 |     to_port     = 5672
		18 |     protocol    = "tcp"
		19 |     cidr_blocks = ["0.0.0.0/0"]
		20 |   }
		21 | 
		22 |   egress {
		23 |     from_port   = 9352
		24 |     to_port     = 9354
		25 |     protocol    = "tcp"
		26 |     cidr_blocks = ["0.0.0.0/0"]
		27 |   }
		28 | 
		29 |   tags = local.tags
		30 | }

Check: CKV_TF_1: "Ensure Terraform module sources use a commit hash"
	FAILED for resource: powerbi_gateway
	File: /powerbi-gateway-server.tf:14-59
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/supply-chain-policies/terraform-policies/ensure-terraform-module-sources-use-git-url-with-commit-hash-revision

		14 | module "powerbi_gateway" {
		15 |   source  = "terraform-aws-modules/ec2-instance/aws"
		16 |   version = "v5.6.0"
		17 | 
		18 |   name = local.environment_configuration.powerbi_gateway_ec2.instance_name
		19 |   # ami                         = data.aws_ami.windows_server_2022.id
		20 |   ami                         = "ami-00ffeb610527f540b" # Hardcoded AMI ID for Windows Server 2022
		21 |   instance_type               = local.environment_configuration.powerbi_gateway_ec2.instance_type
		22 |   key_name                    = aws_key_pair.powerbi_gateway_keypair.key_name
		23 |   monitoring                  = true
		24 |   create_iam_instance_profile = true
		25 |   iam_role_description        = "IAM role for PowerBI Gateway Instance"
		26 |   ignore_ami_changes          = false
		27 |   enable_volume_tags          = false
		28 |   associate_public_ip_address = false
		29 |   iam_role_policies = {
		30 |     SSMCore            = "arn:aws:iam::aws:policy/AmazonSSMManagedInstanceCore"
		31 |     PowerBI_DataAccess = aws_iam_policy.powerbi_gateway_data_access.arn
		32 |   }
		33 |   root_block_device = [
		34 |     {
		35 |       encrypted   = true
		36 |       volume_type = "gp3"
		37 |       volume_size = 100
		38 |       tags = merge({
		39 |         Name = "${local.environment_configuration.powerbi_gateway_ec2.instance_name}-root-volume"
		40 |       }, local.tags)
		41 |     },
		42 |   ]
		43 | 
		44 |   ebs_block_device = [
		45 |     {
		46 |       volume_type = "gp3"
		47 |       device_name = "/dev/sdf"
		48 |       volume_size = 300
		49 |       encrypted   = true
		50 |       tags = merge({
		51 |         Name = "${local.environment_configuration.powerbi_gateway_ec2.instance_name}-data-volume"
		52 |       }, local.tags)
		53 |     }
		54 |   ]
		55 |   vpc_security_group_ids = [aws_security_group.powerbi_gateway.id]
		56 |   subnet_id              = data.aws_subnet.private_subnets_a.id
		57 | 
		58 |   tags = local.tags
		59 | }

Check: CKV_TF_1: "Ensure Terraform module sources use a commit hash"
	FAILED for resource: airflow_s3_bucket
	File: /s3.tf:5-15
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/supply-chain-policies/terraform-policies/ensure-terraform-module-sources-use-git-url-with-commit-hash-revision

		5  | module "airflow_s3_bucket" {
		6  |   source = "github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=v7.1.0"
		7  | 
		8  |   providers = {
		9  |     aws.bucket-replication = aws
		10 |   }
		11 | 
		12 |   bucket_prefix = "moj-data-platform-airflow-${local.environment}"
		13 | 
		14 |   tags = local.tags
		15 | }

Check: CKV_AWS_149: "Ensure that Secrets Manager secret is encrypted using KMS CMK"
	FAILED for resource: aws_secretsmanager_secret.openmetadata_entra_id_client_id
	File: /secrets.tf:7-11
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/ensure-that-secrets-manager-secret-is-encrypted-using-kms

		7  | resource "aws_secretsmanager_secret" "openmetadata_entra_id_client_id" {
		8  |   count = terraform.workspace == "data-platform-apps-and-tools-production" ? 1 : 0
		9  | 
		10 |   name = "openmetadata/entra-id/client-id"
		11 | }

Check: CKV_AWS_149: "Ensure that Secrets Manager secret is encrypted using KMS CMK"
	FAILED for resource: aws_secretsmanager_secret.openmetadata_entra_id_tenant_id
	File: /secrets.tf:13-17
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/ensure-that-secrets-manager-secret-is-encrypted-using-kms

		13 | resource "aws_secretsmanager_secret" "openmetadata_entra_id_tenant_id" {
		14 |   count = terraform.workspace == "data-platform-apps-and-tools-production" ? 1 : 0
		15 | 
		16 |   name = "openmetadata/entra-id/tenant-id"
		17 | }

Check: CKV_AWS_149: "Ensure that Secrets Manager secret is encrypted using KMS CMK"
	FAILED for resource: aws_secretsmanager_secret.github_app_arc_app_id
	File: /secrets.tf:19-23
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/ensure-that-secrets-manager-secret-is-encrypted-using-kms

		19 | resource "aws_secretsmanager_secret" "github_app_arc_app_id" {
		20 |   count = terraform.workspace == "data-platform-apps-and-tools-production" ? 1 : 0
		21 | 
		22 |   name = "github/arc/app-id"
		23 | }

Check: CKV_AWS_149: "Ensure that Secrets Manager secret is encrypted using KMS CMK"
	FAILED for resource: aws_secretsmanager_secret.github_app_arc_install_id
	File: /secrets.tf:25-29
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/ensure-that-secrets-manager-secret-is-encrypted-using-kms

		25 | resource "aws_secretsmanager_secret" "github_app_arc_install_id" {
		26 |   count = terraform.workspace == "data-platform-apps-and-tools-production" ? 1 : 0
		27 | 
		28 |   name = "github/arc/install-id"
		29 | }

Check: CKV_AWS_149: "Ensure that Secrets Manager secret is encrypted using KMS CMK"
	FAILED for resource: aws_secretsmanager_secret.github_app_arc_private_key
	File: /secrets.tf:31-35
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/ensure-that-secrets-manager-secret-is-encrypted-using-kms

		31 | resource "aws_secretsmanager_secret" "github_app_arc_private_key" {
		32 |   count = terraform.workspace == "data-platform-apps-and-tools-production" ? 1 : 0
		33 | 
		34 |   name = "github/arc/private-key"
		35 | }

Check: CKV_AWS_149: "Ensure that Secrets Manager secret is encrypted using KMS CMK"
	FAILED for resource: aws_secretsmanager_secret.govuk_notify_api_key
	File: /secrets.tf:38-42
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/ensure-that-secrets-manager-secret-is-encrypted-using-kms

		38 | resource "aws_secretsmanager_secret" "govuk_notify_api_key" {
		39 |   count = terraform.workspace == "data-platform-apps-and-tools-production" ? 1 : 0
		40 | 
		41 |   name = "gov-uk-notify/production/api-key"
		42 | }

Check: CKV_AWS_149: "Ensure that Secrets Manager secret is encrypted using KMS CMK"
	FAILED for resource: aws_secretsmanager_secret.jml_email
	File: /secrets.tf:45-49
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/ensure-that-secrets-manager-secret-is-encrypted-using-kms

		45 | resource "aws_secretsmanager_secret" "jml_email" {
		46 |   count = terraform.workspace == "data-platform-apps-and-tools-production" ? 1 : 0
		47 | 
		48 |   name = "jml/email"
		49 | }

Check: CKV2_AWS_5: "Ensure that Security Groups are attached to another resource"
	FAILED for resource: aws_security_group.powerbi_gateway
	File: /powerbi-gateway-security-group.tf:2-30
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-networking-policies/ensure-that-security-groups-are-attached-to-ec2-instances-or-elastic-network-interfaces-enis

		2  | resource "aws_security_group" "powerbi_gateway" {
		3  |   name        = local.environment_configuration.powerbi_gateway_ec2.instance_name
		4  |   description = local.environment_configuration.powerbi_gateway_ec2.instance_name
		5  |   vpc_id      = data.aws_vpc.shared.id
		6  | 
		7  |   # https://learn.microsoft.com/en-us/data-integration/gateway/service-gateway-communication#ports
		8  |   egress {
		9  |     from_port   = 443
		10 |     to_port     = 443
		11 |     protocol    = "tcp"
		12 |     cidr_blocks = ["0.0.0.0/0"]
		13 |   }
		14 | 
		15 |   egress {
		16 |     from_port   = 5671
		17 |     to_port     = 5672
		18 |     protocol    = "tcp"
		19 |     cidr_blocks = ["0.0.0.0/0"]
		20 |   }
		21 | 
		22 |   egress {
		23 |     from_port   = 9352
		24 |     to_port     = 9354
		25 |     protocol    = "tcp"
		26 |     cidr_blocks = ["0.0.0.0/0"]
		27 |   }
		28 | 
		29 |   tags = local.tags
		30 | }

Check: CKV2_AWS_57: "Ensure Secrets Manager secrets should have automatic rotation enabled"
	FAILED for resource: aws_secretsmanager_secret.powerbi_gateway_reg_credentials
	File: /powerbi-gateway-secret.tf:1-3
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/bc-aws-2-57

		1 | resource "aws_secretsmanager_secret" "powerbi_gateway_reg_credentials" {
		2 |   name = "${local.environment_configuration.powerbi_gateway_ec2.instance_name}-credentials"
		3 | }

Check: CKV2_AWS_57: "Ensure Secrets Manager secrets should have automatic rotation enabled"
	FAILED for resource: aws_secretsmanager_secret.openmetadata_entra_id_client_id
	File: /secrets.tf:7-11
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/bc-aws-2-57

		7  | resource "aws_secretsmanager_secret" "openmetadata_entra_id_client_id" {
		8  |   count = terraform.workspace == "data-platform-apps-and-tools-production" ? 1 : 0
		9  | 
		10 |   name = "openmetadata/entra-id/client-id"
		11 | }

Check: CKV2_AWS_57: "Ensure Secrets Manager secrets should have automatic rotation enabled"
	FAILED for resource: aws_secretsmanager_secret.openmetadata_entra_id_tenant_id
	File: /secrets.tf:13-17
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/bc-aws-2-57

		13 | resource "aws_secretsmanager_secret" "openmetadata_entra_id_tenant_id" {
		14 |   count = terraform.workspace == "data-platform-apps-and-tools-production" ? 1 : 0
		15 | 
		16 |   name = "openmetadata/entra-id/tenant-id"
		17 | }

Check: CKV2_AWS_57: "Ensure Secrets Manager secrets should have automatic rotation enabled"
	FAILED for resource: aws_secretsmanager_secret.github_app_arc_app_id
	File: /secrets.tf:19-23
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/bc-aws-2-57

		19 | resource "aws_secretsmanager_secret" "github_app_arc_app_id" {
		20 |   count = terraform.workspace == "data-platform-apps-and-tools-production" ? 1 : 0
		21 | 
		22 |   name = "github/arc/app-id"
		23 | }

Check: CKV2_AWS_57: "Ensure Secrets Manager secrets should have automatic rotation enabled"
	FAILED for resource: aws_secretsmanager_secret.github_app_arc_install_id
	File: /secrets.tf:25-29
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/bc-aws-2-57

		25 | resource "aws_secretsmanager_secret" "github_app_arc_install_id" {
		26 |   count = terraform.workspace == "data-platform-apps-and-tools-production" ? 1 : 0
		27 | 
		28 |   name = "github/arc/install-id"
		29 | }

Check: CKV2_AWS_57: "Ensure Secrets Manager secrets should have automatic rotation enabled"
	FAILED for resource: aws_secretsmanager_secret.github_app_arc_private_key
	File: /secrets.tf:31-35
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/bc-aws-2-57

		31 | resource "aws_secretsmanager_secret" "github_app_arc_private_key" {
		32 |   count = terraform.workspace == "data-platform-apps-and-tools-production" ? 1 : 0
		33 | 
		34 |   name = "github/arc/private-key"
		35 | }

Check: CKV2_AWS_57: "Ensure Secrets Manager secrets should have automatic rotation enabled"
	FAILED for resource: aws_secretsmanager_secret.govuk_notify_api_key
	File: /secrets.tf:38-42
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/bc-aws-2-57

		38 | resource "aws_secretsmanager_secret" "govuk_notify_api_key" {
		39 |   count = terraform.workspace == "data-platform-apps-and-tools-production" ? 1 : 0
		40 | 
		41 |   name = "gov-uk-notify/production/api-key"
		42 | }

Check: CKV2_AWS_57: "Ensure Secrets Manager secrets should have automatic rotation enabled"
	FAILED for resource: aws_secretsmanager_secret.jml_email
	File: /secrets.tf:45-49
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/bc-aws-2-57

		45 | resource "aws_secretsmanager_secret" "jml_email" {
		46 |   count = terraform.workspace == "data-platform-apps-and-tools-production" ? 1 : 0
		47 | 
		48 |   name = "jml/email"
		49 | }


checkov_exitcode=1

`CTFLint Scan` Failed

Show Output

*****************************

Setting default tflint config...
Running tflint --init...
Installing "terraform" plugin...
Installed "terraform" (source: github.com/terraform-linters/tflint-ruleset-terraform, version: 0.9.1)
tflint will check the following folders:
terraform/environments/data-platform-apps-and-tools

*****************************

Running tflint in terraform/environments/data-platform-apps-and-tools
Excluding the following checks: terraform_unused_declarations
4 issue(s) found:

Warning: Duplicate key: "airflow_execution_role_name", first defined at terraform/environments/data-platform-apps-and-tools/environment-configuration.tf:31,7-34 (terraform_map_duplicate_keys)

  on terraform/environments/data-platform-apps-and-tools/environment-configuration.tf line 35:
  35:       airflow_execution_role_name   = "${local.application_name}-${local.environment}-airflow-execution"

Reference: https://github.com/terraform-linters/tflint-ruleset-terraform/blob/v0.9.1/docs/rules/terraform_map_duplicate_keys.md

Warning: Duplicate key: "eks_cluster_name", first defined at terraform/environments/data-platform-apps-and-tools/environment-configuration.tf:17,7-23 (terraform_map_duplicate_keys)

  on terraform/environments/data-platform-apps-and-tools/environment-configuration.tf line 68:
  68:       eks_cluster_name               = "apps-tools-development"

Reference: https://github.com/terraform-linters/tflint-ruleset-terraform/blob/v0.9.1/docs/rules/terraform_map_duplicate_keys.md

Warning: Duplicate key: "eks_cluster_name", first defined at terraform/environments/data-platform-apps-and-tools/environment-configuration.tf:105,7-23 (terraform_map_duplicate_keys)

  on terraform/environments/data-platform-apps-and-tools/environment-configuration.tf line 169:
 169:       eks_cluster_name               = "apps-tools-production"

Reference: https://github.com/terraform-linters/tflint-ruleset-terraform/blob/v0.9.1/docs/rules/terraform_map_duplicate_keys.md

Warning: Missing version constraint for provider "random" in `required_providers` (terraform_required_providers)

  on terraform/environments/data-platform-apps-and-tools/random.tf line 24:
  24: resource "random_password" "datahub_rds" {

Reference: https://github.com/terraform-linters/tflint-ruleset-terraform/blob/v0.9.1/docs/rules/terraform_required_providers.md

tflint_exitcode=2

`Trivy Scan` Success

Show Output

*****************************

Trivy will check the following folders:
terraform/environments/data-platform-apps-and-tools

*****************************

Running Trivy in terraform/environments/data-platform-apps-and-tools
2024-10-14T00:34:20Z	INFO	[vulndb] Need to update DB
2024-10-14T00:34:20Z	INFO	[vulndb] Downloading vulnerability DB...
2024-10-14T00:34:20Z	INFO	[vulndb] Downloading artifact...	repo="ghcr.io/aquasecurity/trivy-db:2"
2024-10-14T00:34:23Z	INFO	[vulndb] Artifact successfully downloaded	repo="ghcr.io/aquasecurity/trivy-db:2"
2024-10-14T00:34:23Z	INFO	[vuln] Vulnerability scanning is enabled
2024-10-14T00:34:23Z	INFO	[misconfig] Misconfiguration scanning is enabled
2024-10-14T00:34:23Z	INFO	[misconfig] Need to update the built-in checks
2024-10-14T00:34:23Z	INFO	[misconfig] Downloading the built-in checks...
156.02 KiB / 156.02 KiB [---------------------------------------------------------] 100.00% ? p/s 0s2024-10-14T00:34:23Z	INFO	[secret] Secret scanning is enabled
2024-10-14T00:34:23Z	INFO	[secret] If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2024-10-14T00:34:23Z	INFO	[secret] Please see also https://aquasecurity.github.io/trivy/v0.56/docs/scanner/secret#recommendation for faster secret detection
2024-10-14T00:34:25Z	INFO	[terraform scanner] Scanning root module	file_path="."
2024-10-14T00:34:25Z	WARN	[terraform parser] Variable values was not found in the environment or variable files. Evaluating may not work correctly.	module="root" variables="networking"
2024-10-14T00:34:25Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="data.aws_subnet.private" value="cty.NilVal"
2024-10-14T00:34:25Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.auth0_log_streams" value="cty.NilVal"
2024-10-14T00:34:34Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.airflow_s3_bucket.dynamic.expiration" value="cty.NilVal"
2024-10-14T00:34:34Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.airflow_s3_bucket.dynamic.transition" value="cty.NilVal"
2024-10-14T00:34:34Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.airflow_s3_bucket.dynamic.noncurrent_version_expiration" value="cty.NilVal"
2024-10-14T00:34:34Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.airflow_s3_bucket.dynamic.noncurrent_version_transition" value="cty.NilVal"
2024-10-14T00:34:34Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.airflow_s3_bucket.dynamic.principals" value="cty.NilVal"
2024-10-14T00:34:34Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.airflow_s3_bucket.dynamic.condition" value="cty.NilVal"
2024-10-14T00:34:34Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.airflow_s3_bucket.dynamic.expiration" value="cty.NilVal"
2024-10-14T00:34:34Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.airflow_s3_bucket.dynamic.transition" value="cty.NilVal"
2024-10-14T00:34:34Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.airflow_s3_bucket.dynamic.noncurrent_version_expiration" value="cty.NilVal"
2024-10-14T00:34:34Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.airflow_s3_bucket.dynamic.noncurrent_version_transition" value="cty.NilVal"
2024-10-14T00:34:34Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.airflow_s3_bucket.dynamic.principals" value="cty.NilVal"
2024-10-14T00:34:34Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.airflow_s3_bucket.dynamic.condition" value="cty.NilVal"
2024-10-14T00:34:34Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.cluster_autoscaler_role.dynamic.statement" value="cty.NilVal"
2024-10-14T00:34:34Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.cluster_autoscaler_role.dynamic.statement" value="cty.NilVal"
2024-10-14T00:34:34Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.datahub_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:34Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.datahub_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:34Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.datahub_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:34Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.datahub_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:34Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.datahub_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:34Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.datahub_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:34Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.datahub_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:34Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.datahub_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:34Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.datahub_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:34Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.datahub_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:34Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.datahub_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:34Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.datahub_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:34Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.datahub_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:34Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.datahub_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:34Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.datahub_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:34Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.datahub_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:34Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.datahub_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:34Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.datahub_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:34Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.datahub_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:34Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.datahub_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:34Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.datahub_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:34Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.datahub_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:34Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.datahub_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:34Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.datahub_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:34Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.datahub_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:34Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.datahub_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:34Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.datahub_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:34Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.datahub_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:34Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.eks.aws_ec2_tag.cluster_primary_security_group" value="cty.NilVal"
2024-10-14T00:34:35Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.eks.module.kms.dynamic.statement" value="cty.NilVal"
2024-10-14T00:34:35Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.eks.module.kms.dynamic.statement" value="cty.NilVal"
2024-10-14T00:34:35Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.eks.module.kms.dynamic.statement" value="cty.NilVal"
2024-10-14T00:34:35Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.eks.module.kms.dynamic.statement" value="cty.NilVal"
2024-10-14T00:34:35Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.eks.module.kms.dynamic.statement" value="cty.NilVal"
2024-10-14T00:34:35Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.eks.module.kms.dynamic.statement" value="cty.NilVal"
2024-10-14T00:34:35Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.eks.module.eks_managed_node_group[\"general\"].aws_iam_role_policy_attachment.this" value="cty.NilVal"
2024-10-14T00:34:35Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.cluster_autoscaler_role.dynamic.statement" value="cty.NilVal"
2024-10-14T00:34:35Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.cluster_autoscaler_role.dynamic.statement" value="cty.NilVal"
2024-10-14T00:34:35Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.openmetadata_airflow_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:35Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.openmetadata_airflow_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:35Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.openmetadata_airflow_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:35Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.openmetadata_airflow_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:35Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.openmetadata_airflow_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:35Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.openmetadata_airflow_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:35Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.openmetadata_airflow_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:35Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.openmetadata_airflow_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:37Z	INFO	[terraform executor] Ignore finding	rule="aws-eks-no-public-cluster-access" range="git::https:/github.com/terraform-aws-modules/terraform-aws-eks?ref=2cb1fac31b0fc2dd6a236b0c0678df75819c5a3b/main.tf:37"
2024-10-14T00:34:37Z	INFO	[terraform executor] Ignore finding	rule="aws-s3-encryption-customer-key" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=v7.1.0/main.tf:171-179"
2024-10-14T00:34:37Z	INFO	[terraform executor] Ignore finding	rule="aws-eks-no-public-cluster-access-to-cidr" range="git::https:/github.com/terraform-aws-modules/terraform-aws-eks?ref=2cb1fac31b0fc2dd6a236b0c0678df75819c5a3b/main.tf:38"
2024-10-14T00:34:37Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-egress-sgr" range="git::https:/github.com/terraform-aws-modules/terraform-aws-eks?ref=2cb1fac31b0fc2dd6a236b0c0678df75819c5a3b/node_groups.tf:223"
2024-10-14T00:34:37Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-egress-sgr" range="terraform-aws-modules/security-group/aws/main.tf:533"
2024-10-14T00:34:37Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-egress-sgr" range="terraform-aws-modules/security-group/aws/main.tf:534"
2024-10-14T00:34:37Z	WARN	[pip] Unable to find python `site-packages` directory. License detection is skipped.	err="site-packages directory not found"
2024-10-14T00:34:37Z	INFO	Number of language-specific files	num=1
2024-10-14T00:34:37Z	INFO	[pip] Detecting vulnerabilities...
2024-10-14T00:34:37Z	INFO	Detected config files	num=12
trivy_exitcode=0

github-actions · 2024-11-13T01:50:15Z

This PR is stale because it has been open 30 days with no activity. Remove stale label or comment or this will be closed in 10 days.

dependabot · 2024-11-20T01:02:40Z

Superseded by #8720.

dependabot bot requested a review from a team as a code owner October 14, 2024 00:33

dependabot bot added dependencies Pull requests that update a dependency file terraform Pull requests that update Terraform code labels Oct 14, 2024

dependabot bot mentioned this pull request Oct 14, 2024

Update terraform-aws-modules/lambda/aws requirement from ~> 6.0 to ~> 7.13 in /terraform/environments/data-platform-apps-and-tools #8064

Closed

github-actions bot added the environments-repository Used to exclude PRs from this repo in our Slack PR update label Oct 14, 2024

github-actions bot added Stale and removed Stale labels Nov 13, 2024

dependabot bot closed this Nov 20, 2024

dependabot bot deleted the dependabot/terraform/terraform/environments/data-platform-apps-and-tools/terraform-aws-modules/lambda/aws-tw-7.14 branch November 20, 2024 01:02

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Update terraform-aws-modules/lambda/aws requirement from ~> 6.0 to ~> 7.14 in /terraform/environments/data-platform-apps-and-tools #8201

Update terraform-aws-modules/lambda/aws requirement from ~> 6.0 to ~> 7.14 in /terraform/environments/data-platform-apps-and-tools #8201

dependabot bot commented on behalf of github Oct 14, 2024 •

edited

Loading

github-actions bot commented Oct 14, 2024

github-actions bot commented Nov 13, 2024

dependabot bot commented on behalf of github Nov 20, 2024

Update terraform-aws-modules/lambda/aws requirement from ~> 6.0 to ~> 7.14 in /terraform/environments/data-platform-apps-and-tools #8201

Update terraform-aws-modules/lambda/aws requirement from ~> 6.0 to ~> 7.14 in /terraform/environments/data-platform-apps-and-tools #8201

Conversation

dependabot bot commented on behalf of github Oct 14, 2024 • edited Loading

v7.14.0

7.14.0 (2024-10-11)

Features

Bug Fixes

7.14.0 (2024-10-11)

Features

Bug Fixes

7.13.0 (2024-10-05)

Features

7.12.0 (2024-10-05)

Features

7.11.0 (2024-10-01)

Features

7.10.0 (2024-09-29)

Features

7.9.0 (2024-09-10)

Features

7.8.1 (2024-08-23)

github-actions bot commented Oct 14, 2024

Trivy Scan Success

CTFLint Scan Failed

Trivy Scan Success

github-actions bot commented Nov 13, 2024

dependabot bot commented on behalf of github Nov 20, 2024

dependabot bot commented on behalf of github Oct 14, 2024 •

edited

Loading

`Trivy Scan` Success

`CTFLint Scan` Failed

`Trivy Scan` Success