Update terraform-aws-modules/lambda/aws requirement from ~> 6.0 to ~> 7.16 in /terraform/environments/data-platform-apps-and-tools #8847

dependabot · 2024-11-28T00:16:39Z

Updates the requirements on terraform-aws-modules/lambda/aws to permit the latest version.

Release notes

Sourced from terraform-aws-modules/lambda/aws's releases.

v7.16.0

7.16.0 (2024-11-26)

Features

Radically redesign the build plan form (#646) (32d8d06)

Changelog

Sourced from terraform-aws-modules/lambda/aws's changelog.

7.16.0 (2024-11-26)

Features

Radically redesign the build plan form (#646) (32d8d06)

7.15.0 (2024-11-18)

Features

Make source_path blocks independent (#640) (0fdac2e)

7.14.1 (2024-11-17)

Bug Fixes

Skip broken symlinks on hash computing (#639) (c28b940)

7.14.0 (2024-10-11)

Features

Support lambda function vpc_config.ipv6_allowed_for_dual_stack and event source mapping tags (#628) (2a602f9)

Bug Fixes

Update CI workflow versions to latest (#631) (d06718f)

7.13.0 (2024-10-05)

Features

Support aws_lambda_event_source_mapping.document_db_event_source_config (#626) (5d48199)

7.12.0 (2024-10-05)

Features

Add support for kafka event source config (#617) (2c077cb)

7.11.0 (2024-10-01)

... (truncated)

Commits

abd5a15 chore(release): version 7.16.0 [skip ci]
32d8d06 feat: Radically redesign the build plan form (#646)
1fe3e4a chore(release): version 7.15.0 [skip ci]
0fdac2e feat: Make source_path blocks independent (#640)
ce8417e chore(release): version 7.14.1 [skip ci]
c28b940 fix: Skip broken symlinks on hash computing (#639)
00a7172 chore(release): version 7.14.0 [skip ci]
2a602f9 feat: Support lambda function vpc_config.ipv6_allowed_for_dual_stack and ev...
d06718f fix: Update CI workflow versions to latest (#631)
7bd028b chore(release): version 7.13.0 [skip ci]
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

… 7.16 Updates the requirements on [terraform-aws-modules/lambda/aws](https://github.com/terraform-aws-modules/terraform-aws-lambda) to permit the latest version. - [Release notes](https://github.com/terraform-aws-modules/terraform-aws-lambda/releases) - [Changelog](https://github.com/terraform-aws-modules/terraform-aws-lambda/blob/master/CHANGELOG.md) - [Commits](terraform-aws-modules/terraform-aws-lambda@v6.0.0...v7.16.0) --- updated-dependencies: - dependency-name: terraform-aws-modules/lambda/aws dependency-type: direct:production ... Signed-off-by: dependabot[bot] <[email protected]>

github-actions · 2024-11-28T00:19:02Z

`Trivy Scan` Success

Show Output

```hcl

Trivy will check the following folders:
terraform/environments/data-platform-apps-and-tools

Running Trivy in terraform/environments/data-platform-apps-and-tools
2024-11-28T00:18:44Z INFO [vulndb] Need to update DB
2024-11-28T00:18:44Z INFO [vulndb] Downloading vulnerability DB...
2024-11-28T00:18:44Z INFO [vulndb] Downloading artifact... repo="public.ecr.aws/aquasecurity/trivy-db:2"
2024-11-28T00:18:47Z INFO [vulndb] Artifact successfully downloaded repo="public.ecr.aws/aquasecurity/trivy-db:2"
2024-11-28T00:18:47Z INFO [vuln] Vulnerability scanning is enabled
2024-11-28T00:18:47Z INFO [misconfig] Misconfiguration scanning is enabled
2024-11-28T00:18:47Z INFO [misconfig] Need to update the built-in checks
2024-11-28T00:18:47Z INFO [misconfig] Downloading the built-in checks...
2024-11-28T00:18:47Z ERROR [misconfig] Falling back to embedded checks err="failed to download built-in policies: download error: OCI repository error: 1 error occurred:\n\t* GET https://ghcr.io/v2/aquasecurity/trivy-checks/manifests/1: TOOMANYREQUESTS: retry-after: 75.668µs, allowed: 44000/minute\n\n"
2024-11-28T00:18:47Z INFO [secret] Secret scanning is enabled
2024-11-28T00:18:47Z INFO [secret] If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2024-11-28T00:18:47Z INFO [secret] Please see also https://aquasecurity.github.io/trivy/v0.57/docs/scanner/secret#recommendation for faster secret detection
2024-11-28T00:18:48Z WARN [pip] Unable to find python site-packages directory. License detection is skipped. err="site-packages directory not found"
2024-11-28T00:18:49Z INFO [terraform scanner] Scanning root module file_path="."
2024-11-28T00:18:49Z WARN [terraform parser] Variable values was not found in the environment or variable files. Evaluating may not work correctly. module="root" variables="networking"
2024-11-28T00:18:49Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="data.aws_subnet.private" value="cty.NilVal"
2024-11-28T00:18:49Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.auth0_log_streams" value="cty.NilVal"
2024-11-28T00:18:53Z ERROR [terraform evaluator] Failed to expand dynamic block. block="module.cluster_autoscaler_role.data.aws_iam_policy_document.cluster_autoscaler[0]" err="1 error occurred:\n\t* invalid for-each in data.aws_iam_policy_document.cluster_autoscaler[0].dynamic.statement block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\n"
2024-11-28T00:18:53Z ERROR [terraform evaluator] Failed to expand dynamic block. block="module.cluster_autoscaler_role.data.aws_iam_policy_document.cluster_autoscaler[0]" err="1 error occurred:\n\t* invalid for-each in data.aws_iam_policy_document.cluster_autoscaler[0].dynamic.statement block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\n"
2024-11-28T00:18:53Z ERROR [terraform evaluator] Failed to expand dynamic block. block="module.datahub_rds.module.db_instance.aws_db_instance.this[0]" err="2 errors occurred:\n\t* invalid for-each in aws_db_instance.this[0].dynamic.restore_to_point_in_time block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\t* invalid for-each in aws_db_instance.this[0].dynamic.s3_import block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\n"
2024-11-28T00:18:53Z ERROR [terraform evaluator] Failed to expand dynamic block. block="module.datahub_rds.module.db_instance.aws_db_instance.this[0]" err="2 errors occurred:\n\t* invalid for-each in aws_db_instance.this[0].dynamic.restore_to_point_in_time block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\t* invalid for-each in aws_db_instance.this[0].dynamic.s3_import block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\n"
2024-11-28T00:18:53Z ERROR [terraform evaluator] Failed to expand dynamic block. block="module.datahub_rds.module.db_instance.aws_db_instance.this[0]" err="2 errors occurred:\n\t* invalid for-each in aws_db_instance.this[0].dynamic.restore_to_point_in_time block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\t* invalid for-each in aws_db_instance.this[0].dynamic.s3_import block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\n"
2024-11-28T00:18:53Z ERROR [terraform evaluator] Failed to expand dynamic block. block="module.datahub_rds.module.db_instance.aws_db_instance.this[0]" err="2 errors occurred:\n\t* invalid for-each in aws_db_instance.this[0].dynamic.restore_to_point_in_time block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\t* invalid for-each in aws_db_instance.this[0].dynamic.s3_import block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\n"
2024-11-28T00:18:53Z ERROR [terraform evaluator] Failed to expand dynamic block. block="module.datahub_rds.module.db_instance.aws_db_instance.this[0]" err="2 errors occurred:\n\t* invalid for-each in aws_db_instance.this[0].dynamic.restore_to_point_in_time block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\t* invalid for-each in aws_db_instance.this[0].dynamic.s3_import block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\n"
2024-11-28T00:18:53Z ERROR [terraform evaluator] Failed to expand dynamic block. block="module.datahub_rds.module.db_instance.aws_db_instance.this[0]" err="2 errors occurred:\n\t* invalid for-each in aws_db_instance.this[0].dynamic.restore_to_point_in_time block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\t* invalid for-each in aws_db_instance.this[0].dynamic.s3_import block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\n"
2024-11-28T00:18:53Z ERROR [terraform evaluator] Failed to expand dynamic block. block="module.datahub_rds.module.db_instance.aws_db_instance.this[0]" err="2 errors occurred:\n\t* invalid for-each in aws_db_instance.this[0].dynamic.restore_to_point_in_time block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\t* invalid for-each in aws_db_instance.this[0].dynamic.s3_import block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\n"
2024-11-28T00:18:53Z ERROR [terraform evaluator] Failed to expand dynamic block. block="module.datahub_rds.module.db_instance.aws_db_instance.this[0]" err="2 errors occurred:\n\t* invalid for-each in aws_db_instance.this[0].dynamic.restore_to_point_in_time block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\t* invalid for-each in aws_db_instance.this[0].dynamic.s3_import block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\n"
2024-11-28T00:18:53Z ERROR [terraform evaluator] Failed to expand dynamic block. block="module.datahub_rds.module.db_instance.aws_db_instance.this[0]" err="2 errors occurred:\n\t* invalid for-each in aws_db_instance.this[0].dynamic.restore_to_point_in_time block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\t* invalid for-each in aws_db_instance.this[0].dynamic.s3_import block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\n"
2024-11-28T00:18:53Z ERROR [terraform evaluator] Failed to expand dynamic block. block="module.datahub_rds.module.db_instance.aws_db_instance.this[0]" err="2 errors occurred:\n\t* invalid for-each in aws_db_instance.this[0].dynamic.restore_to_point_in_time block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\t* invalid for-each in aws_db_instance.this[0].dynamic.s3_import block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\n"
2024-11-28T00:18:53Z ERROR [terraform evaluator] Failed to expand dynamic block. block="module.datahub_rds.module.db_instance.aws_db_instance.this[0]" err="2 errors occurred:\n\t* invalid for-each in aws_db_instance.this[0].dynamic.restore_to_point_in_time block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\t* invalid for-each in aws_db_instance.this[0].dynamic.s3_import block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\n"
2024-11-28T00:18:53Z ERROR [terraform evaluator] Failed to expand dynamic block. block="module.datahub_rds.module.db_instance.aws_db_instance.this[0]" err="2 errors occurred:\n\t* invalid for-each in aws_db_instance.this[0].dynamic.restore_to_point_in_time block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\t* invalid for-each in aws_db_instance.this[0].dynamic.s3_import block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\n"
2024-11-28T00:18:53Z ERROR [terraform evaluator] Failed to expand dynamic block. block="module.datahub_rds.module.db_instance.aws_db_instance.this[0]" err="2 errors occurred:\n\t* invalid for-each in aws_db_instance.this[0].dynamic.restore_to_point_in_time block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\t* invalid for-each in aws_db_instance.this[0].dynamic.s3_import block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\n"
2024-11-28T00:18:53Z ERROR [terraform evaluator] Failed to expand dynamic block. block="module.datahub_rds.module.db_instance.aws_db_instance.this[0]" err="2 errors occurred:\n\t* invalid for-each in aws_db_instance.this[0].dynamic.restore_to_point_in_time block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\t* invalid for-each in aws_db_instance.this[0].dynamic.s3_import block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\n"
2024-11-28T00:18:53Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.eks.aws_ec2_tag.cluster_primary_security_group" value="cty.NilVal"
2024-11-28T00:18:54Z ERROR [terraform evaluator] Failed to expand dynamic block. block="module.eks.module.kms.data.aws_iam_policy_document.this[0]" err="2 errors occurred:\n\t* invalid for-each in data.aws_iam_policy_document.this[0].dynamic.statement block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\t* invalid for-each in data.aws_iam_policy_document.this[0].dynamic.statement block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\n"
2024-11-28T00:18:54Z ERROR [terraform evaluator] Failed to expand dynamic block. block="module.eks.module.kms.data.aws_iam_policy_document.this[0]" err="2 errors occurred:\n\t* invalid for-each in data.aws_iam_policy_document.this[0].dynamic.statement block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\t* invalid for-each in data.aws_iam_policy_document.this[0].dynamic.statement block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\n"
2024-11-28T00:18:54Z ERROR [terraform evaluator] Failed to expand dynamic block. block="module.eks.module.kms.data.aws_iam_policy_document.this[0]" err="1 error occurred:\n\t* invalid for-each in data.aws_iam_policy_document.this[0].dynamic.statement block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\n"
2024-11-28T00:18:54Z ERROR [terraform evaluator] Failed to expand dynamic block. block="module.eks.module.kms.data.aws_iam_policy_document.this[0]" err="1 error occurred:\n\t* invalid for-each in data.aws_iam_policy_document.this[0].dynamic.statement block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\n"
2024-11-28T00:18:54Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.eks.module.eks_managed_node_group["general"].aws_iam_role_policy_attachment.this" value="cty.NilVal"
2024-11-28T00:18:54Z ERROR [terraform evaluator] Failed to expand dynamic block. block="module.cluster_autoscaler_role.data.aws_iam_policy_document.cluster_autoscaler[0]" err="1 error occurred:\n\t* invalid for-each in data.aws_iam_policy_document.cluster_autoscaler[0].dynamic.statement block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\n"
2024-11-28T00:18:54Z ERROR [terraform evaluator] Failed to expand dynamic block. block="module.cluster_autoscaler_role.data.aws_iam_policy_document.cluster_autoscaler[0]" err="1 error occurred:\n\t* invalid for-each in data.aws_iam_policy_document.cluster_autoscaler[0].dynamic.statement block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\n"
2024-11-28T00:18:55Z ERROR [terraform evaluator] Failed to expand dynamic block. block="module.openmetadata_airflow_rds.module.db_instance.aws_db_instance.this[0]" err="2 errors occurred:\n\t* invalid for-each in aws_db_instance.this[0].dynamic.restore_to_point_in_time block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\t* invalid for-each in aws_db_instance.this[0].dynamic.s3_import block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\n"
2024-11-28T00:18:55Z ERROR [terraform evaluator] Failed to expand dynamic block. block="module.openmetadata_airflow_rds.module.db_instance.aws_db_instance.this[0]" err="2 errors occurred:\n\t* invalid for-each in aws_db_instance.this[0].dynamic.restore_to_point_in_time block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\t* invalid for-each in aws_db_instance.this[0].dynamic.s3_import block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\n"
2024-11-28T00:18:55Z ERROR [terraform evaluator] Failed to expand dynamic block. block="module.openmetadata_airflow_rds.module.db_instance.aws_db_instance.this[0]" err="2 errors occurred:\n\t* invalid for-each in aws_db_instance.this[0].dynamic.restore_to_point_in_time block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\t* invalid for-each in aws_db_instance.this[0].dynamic.s3_import block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\n"
2024-11-28T00:18:55Z ERROR [terraform evaluator] Failed to expand dynamic block. block="module.openmetadata_airflow_rds.module.db_instance.aws_db_instance.this[0]" err="2 errors occurred:\n\t* invalid for-each in aws_db_instance.this[0].dynamic.restore_to_point_in_time block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\t* invalid for-each in aws_db_instance.this[0].dynamic.s3_import block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\n"
2024-11-28T00:18:56Z INFO [terraform executor] Ignore finding rule="aws-eks-no-public-cluster-access" range="git::https:/github.com/terraform-aws-modules/terraform-aws-eks?ref=2cb1fac31b0fc2dd6a236b0c0678df75819c5a3b/main.tf:37"
2024-11-28T00:18:56Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-egress-sgr" range="git::https:/github.com/terraform-aws-modules/terraform-aws-eks?ref=2cb1fac31b0fc2dd6a236b0c0678df75819c5a3b/node_groups.tf:223"
2024-11-28T00:18:56Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-egress-sgr" range="terraform-aws-modules/security-group/aws/main.tf:533"
2024-11-28T00:18:56Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-egress-sgr" range="terraform-aws-modules/security-group/aws/main.tf:534"
2024-11-28T00:18:56Z INFO [terraform executor] Ignore finding rule="aws-s3-encryption-customer-key" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=v7.1.0/main.tf:171-179"
2024-11-28T00:18:56Z INFO [terraform executor] Ignore finding rule="aws-eks-no-public-cluster-access-to-cidr" range="git::https:/github.com/terraform-aws-modules/terraform-aws-eks?ref=2cb1fac31b0fc2dd6a236b0c0678df75819c5a3b/main.tf:38"
2024-11-28T00:18:56Z INFO Number of language-specific files num=1
2024-11-28T00:18:56Z INFO [pip] Detecting vulnerabilities...
2024-11-28T00:18:56Z INFO Detected config files num=10
trivy_exitcode=0

</details> #### `Checkov Scan` Failed
<details><summary>Show Output</summary>

```hcl

*****************************

Checkov will check the following folders:
terraform/environments/data-platform-apps-and-tools

*****************************

Running Checkov in terraform/environments/data-platform-apps-and-tools
Excluding the following checks: CKV_GIT_1,CKV_AWS_126,CKV2_AWS_38,CKV2_AWS_39
2024-11-28 00:18:59,022 [MainThread  ] [WARNI]  Failed to download module terraform-aws-modules/cloudwatch/aws//modules/log-group:~> 5.0 (for external modules, the --download-external-modules flag is required)
2024-11-28 00:18:59,022 [MainThread  ] [WARNI]  Failed to download module ministryofjustice/observability-platform-tenant/aws:1.0.1 (for external modules, the --download-external-modules flag is required)
2024-11-28 00:18:59,022 [MainThread  ] [WARNI]  Failed to download module terraform-aws-modules/eks/aws:19.21.0 (for external modules, the --download-external-modules flag is required)
2024-11-28 00:18:59,022 [MainThread  ] [WARNI]  Failed to download module terraform-aws-modules/kms/aws:~> 2.0 (for external modules, the --download-external-modules flag is required)
2024-11-28 00:18:59,023 [MainThread  ] [WARNI]  Failed to download module terraform-aws-modules/rds/aws:~> 6.0 (for external modules, the --download-external-modules flag is required)
2024-11-28 00:18:59,023 [MainThread  ] [WARNI]  Failed to download module terraform-aws-modules/iam/aws//modules/iam-assumable-role:~> 5.0 (for external modules, the --download-external-modules flag is required)
2024-11-28 00:18:59,023 [MainThread  ] [WARNI]  Failed to download module terraform-aws-modules/vpc/aws//modules/vpc-endpoints:~> 5.0 (for external modules, the --download-external-modules flag is required)
2024-11-28 00:18:59,023 [MainThread  ] [WARNI]  Failed to download module terraform-aws-modules/iam/aws//modules/iam-policy:~> 5.0 (for external modules, the --download-external-modules flag is required)
2024-11-28 00:18:59,023 [MainThread  ] [WARNI]  Failed to download module terraform-aws-modules/lambda/aws:~> 7.16 (for external modules, the --download-external-modules flag is required)
2024-11-28 00:18:59,023 [MainThread  ] [WARNI]  Failed to download module terraform-aws-modules/iam/aws//modules/iam-user:~> 5 (for external modules, the --download-external-modules flag is required)
2024-11-28 00:18:59,023 [MainThread  ] [WARNI]  Failed to download module terraform-aws-modules/efs/aws:~> 1.0 (for external modules, the --download-external-modules flag is required)
2024-11-28 00:18:59,024 [MainThread  ] [WARNI]  Failed to download module github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=v7.1.0:None (for external modules, the --download-external-modules flag is required)
2024-11-28 00:18:59,024 [MainThread  ] [WARNI]  Failed to download module terraform-aws-modules/security-group/aws:~> 5.0 (for external modules, the --download-external-modules flag is required)
2024-11-28 00:18:59,024 [MainThread  ] [WARNI]  Failed to download module terraform-aws-modules/ec2-instance/aws:None (for external modules, the --download-external-modules flag is required)
2024-11-28 00:18:59,024 [MainThread  ] [WARNI]  Failed to download module terraform-aws-modules/vpc/aws:~> 5.0 (for external modules, the --download-external-modules flag is required)
2024-11-28 00:18:59,024 [MainThread  ] [WARNI]  Failed to download module terraform-aws-modules/iam/aws//modules/iam-role-for-service-accounts-eks:~> 5.0 (for external modules, the --download-external-modules flag is required)
2024-11-28 00:18:59,024 [MainThread  ] [WARNI]  Failed to download module terraform-aws-modules/kms/aws:2.2.0 (for external modules, the --download-external-modules flag is required)
terraform scan results:

Passed checks: 170, Failed checks: 20, Skipped checks: 43

Check: CKV_AWS_149: "Ensure that Secrets Manager secret is encrypted using KMS CMK"
	FAILED for resource: aws_secretsmanager_secret.powerbi_gateway_reg_credentials
	File: /powerbi-gateway-secret.tf:1-3
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/ensure-that-secrets-manager-secret-is-encrypted-using-kms

		1 | resource "aws_secretsmanager_secret" "powerbi_gateway_reg_credentials" {
		2 |   name = "${local.environment_configuration.powerbi_gateway_ec2.instance_name}-credentials"
		3 | }

Check: CKV_AWS_23: "Ensure every security group and rule has a description"
	FAILED for resource: aws_security_group.powerbi_gateway
	File: /powerbi-gateway-security-group.tf:2-30
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-networking-policies/networking-31

		2  | resource "aws_security_group" "powerbi_gateway" {
		3  |   name        = local.environment_configuration.powerbi_gateway_ec2.instance_name
		4  |   description = local.environment_configuration.powerbi_gateway_ec2.instance_name
		5  |   vpc_id      = data.aws_vpc.shared.id
		6  | 
		7  |   # https://learn.microsoft.com/en-us/data-integration/gateway/service-gateway-communication#ports
		8  |   egress {
		9  |     from_port   = 443
		10 |     to_port     = 443
		11 |     protocol    = "tcp"
		12 |     cidr_blocks = ["0.0.0.0/0"]
		13 |   }
		14 | 
		15 |   egress {
		16 |     from_port   = 5671
		17 |     to_port     = 5672
		18 |     protocol    = "tcp"
		19 |     cidr_blocks = ["0.0.0.0/0"]
		20 |   }
		21 | 
		22 |   egress {
		23 |     from_port   = 9352
		24 |     to_port     = 9354
		25 |     protocol    = "tcp"
		26 |     cidr_blocks = ["0.0.0.0/0"]
		27 |   }
		28 | 
		29 |   tags = local.tags
		30 | }

Check: CKV_TF_1: "Ensure Terraform module sources use a commit hash"
	FAILED for resource: powerbi_gateway
	File: /powerbi-gateway-server.tf:14-59
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/supply-chain-policies/terraform-policies/ensure-terraform-module-sources-use-git-url-with-commit-hash-revision

		14 | module "powerbi_gateway" {
		15 |   source  = "terraform-aws-modules/ec2-instance/aws"
		16 |   version = "v5.6.0"
		17 | 
		18 |   name = local.environment_configuration.powerbi_gateway_ec2.instance_name
		19 |   # ami                         = data.aws_ami.windows_server_2022.id
		20 |   ami                         = "ami-00ffeb610527f540b" # Hardcoded AMI ID for Windows Server 2022
		21 |   instance_type               = local.environment_configuration.powerbi_gateway_ec2.instance_type
		22 |   key_name                    = aws_key_pair.powerbi_gateway_keypair.key_name
		23 |   monitoring                  = true
		24 |   create_iam_instance_profile = true
		25 |   iam_role_description        = "IAM role for PowerBI Gateway Instance"
		26 |   ignore_ami_changes          = false
		27 |   enable_volume_tags          = false
		28 |   associate_public_ip_address = false
		29 |   iam_role_policies = {
		30 |     SSMCore            = "arn:aws:iam::aws:policy/AmazonSSMManagedInstanceCore"
		31 |     PowerBI_DataAccess = aws_iam_policy.powerbi_gateway_data_access.arn
		32 |   }
		33 |   root_block_device = [
		34 |     {
		35 |       encrypted   = true
		36 |       volume_type = "gp3"
		37 |       volume_size = 100
		38 |       tags = merge({
		39 |         Name = "${local.environment_configuration.powerbi_gateway_ec2.instance_name}-root-volume"
		40 |       }, local.tags)
		41 |     },
		42 |   ]
		43 | 
		44 |   ebs_block_device = [
		45 |     {
		46 |       volume_type = "gp3"
		47 |       device_name = "/dev/sdf"
		48 |       volume_size = 300
		49 |       encrypted   = true
		50 |       tags = merge({
		51 |         Name = "${local.environment_configuration.powerbi_gateway_ec2.instance_name}-data-volume"
		52 |       }, local.tags)
		53 |     }
		54 |   ]
		55 |   vpc_security_group_ids = [aws_security_group.powerbi_gateway.id]
		56 |   subnet_id              = data.aws_subnet.private_subnets_a.id
		57 | 
		58 |   tags = local.tags
		59 | }

Check: CKV_TF_1: "Ensure Terraform module sources use a commit hash"
	FAILED for resource: airflow_s3_bucket
	File: /s3.tf:5-15
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/supply-chain-policies/terraform-policies/ensure-terraform-module-sources-use-git-url-with-commit-hash-revision

		5  | module "airflow_s3_bucket" {
		6  |   source = "github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=v7.1.0"
		7  | 
		8  |   providers = {
		9  |     aws.bucket-replication = aws
		10 |   }
		11 | 
		12 |   bucket_prefix = "moj-data-platform-airflow-${local.environment}"
		13 | 
		14 |   tags = local.tags
		15 | }

Check: CKV_AWS_149: "Ensure that Secrets Manager secret is encrypted using KMS CMK"
	FAILED for resource: aws_secretsmanager_secret.openmetadata_entra_id_client_id
	File: /secrets.tf:7-11
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/ensure-that-secrets-manager-secret-is-encrypted-using-kms

		7  | resource "aws_secretsmanager_secret" "openmetadata_entra_id_client_id" {
		8  |   count = terraform.workspace == "data-platform-apps-and-tools-production" ? 1 : 0
		9  | 
		10 |   name = "openmetadata/entra-id/client-id"
		11 | }

Check: CKV_AWS_149: "Ensure that Secrets Manager secret is encrypted using KMS CMK"
	FAILED for resource: aws_secretsmanager_secret.openmetadata_entra_id_tenant_id
	File: /secrets.tf:13-17
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/ensure-that-secrets-manager-secret-is-encrypted-using-kms

		13 | resource "aws_secretsmanager_secret" "openmetadata_entra_id_tenant_id" {
		14 |   count = terraform.workspace == "data-platform-apps-and-tools-production" ? 1 : 0
		15 | 
		16 |   name = "openmetadata/entra-id/tenant-id"
		17 | }

Check: CKV_AWS_149: "Ensure that Secrets Manager secret is encrypted using KMS CMK"
	FAILED for resource: aws_secretsmanager_secret.github_app_arc_app_id
	File: /secrets.tf:19-23
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/ensure-that-secrets-manager-secret-is-encrypted-using-kms

		19 | resource "aws_secretsmanager_secret" "github_app_arc_app_id" {
		20 |   count = terraform.workspace == "data-platform-apps-and-tools-production" ? 1 : 0
		21 | 
		22 |   name = "github/arc/app-id"
		23 | }

Check: CKV_AWS_149: "Ensure that Secrets Manager secret is encrypted using KMS CMK"
	FAILED for resource: aws_secretsmanager_secret.github_app_arc_install_id
	File: /secrets.tf:25-29
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/ensure-that-secrets-manager-secret-is-encrypted-using-kms

		25 | resource "aws_secretsmanager_secret" "github_app_arc_install_id" {
		26 |   count = terraform.workspace == "data-platform-apps-and-tools-production" ? 1 : 0
		27 | 
		28 |   name = "github/arc/install-id"
		29 | }

Check: CKV_AWS_149: "Ensure that Secrets Manager secret is encrypted using KMS CMK"
	FAILED for resource: aws_secretsmanager_secret.github_app_arc_private_key
	File: /secrets.tf:31-35
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/ensure-that-secrets-manager-secret-is-encrypted-using-kms

		31 | resource "aws_secretsmanager_secret" "github_app_arc_private_key" {
		32 |   count = terraform.workspace == "data-platform-apps-and-tools-production" ? 1 : 0
		33 | 
		34 |   name = "github/arc/private-key"
		35 | }

Check: CKV_AWS_149: "Ensure that Secrets Manager secret is encrypted using KMS CMK"
	FAILED for resource: aws_secretsmanager_secret.govuk_notify_api_key
	File: /secrets.tf:38-42
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/ensure-that-secrets-manager-secret-is-encrypted-using-kms

		38 | resource "aws_secretsmanager_secret" "govuk_notify_api_key" {
		39 |   count = terraform.workspace == "data-platform-apps-and-tools-production" ? 1 : 0
		40 | 
		41 |   name = "gov-uk-notify/production/api-key"
		42 | }

Check: CKV_AWS_149: "Ensure that Secrets Manager secret is encrypted using KMS CMK"
	FAILED for resource: aws_secretsmanager_secret.jml_email
	File: /secrets.tf:45-49
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/ensure-that-secrets-manager-secret-is-encrypted-using-kms

		45 | resource "aws_secretsmanager_secret" "jml_email" {
		46 |   count = terraform.workspace == "data-platform-apps-and-tools-production" ? 1 : 0
		47 | 
		48 |   name = "jml/email"
		49 | }

Check: CKV2_AWS_57: "Ensure Secrets Manager secrets should have automatic rotation enabled"
	FAILED for resource: aws_secretsmanager_secret.powerbi_gateway_reg_credentials
	File: /powerbi-gateway-secret.tf:1-3
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/bc-aws-2-57

		1 | resource "aws_secretsmanager_secret" "powerbi_gateway_reg_credentials" {
		2 |   name = "${local.environment_configuration.powerbi_gateway_ec2.instance_name}-credentials"
		3 | }

Check: CKV2_AWS_57: "Ensure Secrets Manager secrets should have automatic rotation enabled"
	FAILED for resource: aws_secretsmanager_secret.openmetadata_entra_id_client_id
	File: /secrets.tf:7-11
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/bc-aws-2-57

		7  | resource "aws_secretsmanager_secret" "openmetadata_entra_id_client_id" {
		8  |   count = terraform.workspace == "data-platform-apps-and-tools-production" ? 1 : 0
		9  | 
		10 |   name = "openmetadata/entra-id/client-id"
		11 | }

Check: CKV2_AWS_57: "Ensure Secrets Manager secrets should have automatic rotation enabled"
	FAILED for resource: aws_secretsmanager_secret.openmetadata_entra_id_tenant_id
	File: /secrets.tf:13-17
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/bc-aws-2-57

		13 | resource "aws_secretsmanager_secret" "openmetadata_entra_id_tenant_id" {
		14 |   count = terraform.workspace == "data-platform-apps-and-tools-production" ? 1 : 0
		15 | 
		16 |   name = "openmetadata/entra-id/tenant-id"
		17 | }

Check: CKV2_AWS_57: "Ensure Secrets Manager secrets should have automatic rotation enabled"
	FAILED for resource: aws_secretsmanager_secret.github_app_arc_app_id
	File: /secrets.tf:19-23
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/bc-aws-2-57

		19 | resource "aws_secretsmanager_secret" "github_app_arc_app_id" {
		20 |   count = terraform.workspace == "data-platform-apps-and-tools-production" ? 1 : 0
		21 | 
		22 |   name = "github/arc/app-id"
		23 | }

Check: CKV2_AWS_57: "Ensure Secrets Manager secrets should have automatic rotation enabled"
	FAILED for resource: aws_secretsmanager_secret.github_app_arc_install_id
	File: /secrets.tf:25-29
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/bc-aws-2-57

		25 | resource "aws_secretsmanager_secret" "github_app_arc_install_id" {
		26 |   count = terraform.workspace == "data-platform-apps-and-tools-production" ? 1 : 0
		27 | 
		28 |   name = "github/arc/install-id"
		29 | }

Check: CKV2_AWS_57: "Ensure Secrets Manager secrets should have automatic rotation enabled"
	FAILED for resource: aws_secretsmanager_secret.github_app_arc_private_key
	File: /secrets.tf:31-35
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/bc-aws-2-57

		31 | resource "aws_secretsmanager_secret" "github_app_arc_private_key" {
		32 |   count = terraform.workspace == "data-platform-apps-and-tools-production" ? 1 : 0
		33 | 
		34 |   name = "github/arc/private-key"
		35 | }

Check: CKV2_AWS_57: "Ensure Secrets Manager secrets should have automatic rotation enabled"
	FAILED for resource: aws_secretsmanager_secret.govuk_notify_api_key
	File: /secrets.tf:38-42
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/bc-aws-2-57

		38 | resource "aws_secretsmanager_secret" "govuk_notify_api_key" {
		39 |   count = terraform.workspace == "data-platform-apps-and-tools-production" ? 1 : 0
		40 | 
		41 |   name = "gov-uk-notify/production/api-key"
		42 | }

Check: CKV2_AWS_57: "Ensure Secrets Manager secrets should have automatic rotation enabled"
	FAILED for resource: aws_secretsmanager_secret.jml_email
	File: /secrets.tf:45-49
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/bc-aws-2-57

		45 | resource "aws_secretsmanager_secret" "jml_email" {
		46 |   count = terraform.workspace == "data-platform-apps-and-tools-production" ? 1 : 0
		47 | 
		48 |   name = "jml/email"
		49 | }

Check: CKV2_AWS_5: "Ensure that Security Groups are attached to another resource"
	FAILED for resource: aws_security_group.powerbi_gateway
	File: /powerbi-gateway-security-group.tf:2-30
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-networking-policies/ensure-that-security-groups-are-attached-to-ec2-instances-or-elastic-network-interfaces-enis

		2  | resource "aws_security_group" "powerbi_gateway" {
		3  |   name        = local.environment_configuration.powerbi_gateway_ec2.instance_name
		4  |   description = local.environment_configuration.powerbi_gateway_ec2.instance_name
		5  |   vpc_id      = data.aws_vpc.shared.id
		6  | 
		7  |   # https://learn.microsoft.com/en-us/data-integration/gateway/service-gateway-communication#ports
		8  |   egress {
		9  |     from_port   = 443
		10 |     to_port     = 443
		11 |     protocol    = "tcp"
		12 |     cidr_blocks = ["0.0.0.0/0"]
		13 |   }
		14 | 
		15 |   egress {
		16 |     from_port   = 5671
		17 |     to_port     = 5672
		18 |     protocol    = "tcp"
		19 |     cidr_blocks = ["0.0.0.0/0"]
		20 |   }
		21 | 
		22 |   egress {
		23 |     from_port   = 9352
		24 |     to_port     = 9354
		25 |     protocol    = "tcp"
		26 |     cidr_blocks = ["0.0.0.0/0"]
		27 |   }
		28 | 
		29 |   tags = local.tags
		30 | }


checkov_exitcode=1

`CTFLint Scan` Failed

Show Output

*****************************

Setting default tflint config...
Running tflint --init...
Installing "terraform" plugin...
Installed "terraform" (source: github.com/terraform-linters/tflint-ruleset-terraform, version: 0.9.1)
tflint will check the following folders:
terraform/environments/data-platform-apps-and-tools

*****************************

Running tflint in terraform/environments/data-platform-apps-and-tools
Excluding the following checks: terraform_unused_declarations
4 issue(s) found:

Warning: Duplicate key: "airflow_execution_role_name", first defined at terraform/environments/data-platform-apps-and-tools/environment-configuration.tf:31,7-34 (terraform_map_duplicate_keys)

  on terraform/environments/data-platform-apps-and-tools/environment-configuration.tf line 35:
  35:       airflow_execution_role_name   = "${local.application_name}-${local.environment}-airflow-execution"

Reference: https://github.com/terraform-linters/tflint-ruleset-terraform/blob/v0.9.1/docs/rules/terraform_map_duplicate_keys.md

Warning: Duplicate key: "eks_cluster_name", first defined at terraform/environments/data-platform-apps-and-tools/environment-configuration.tf:17,7-23 (terraform_map_duplicate_keys)

  on terraform/environments/data-platform-apps-and-tools/environment-configuration.tf line 68:
  68:       eks_cluster_name               = "apps-tools-development"

Reference: https://github.com/terraform-linters/tflint-ruleset-terraform/blob/v0.9.1/docs/rules/terraform_map_duplicate_keys.md

Warning: Duplicate key: "eks_cluster_name", first defined at terraform/environments/data-platform-apps-and-tools/environment-configuration.tf:105,7-23 (terraform_map_duplicate_keys)

  on terraform/environments/data-platform-apps-and-tools/environment-configuration.tf line 169:
 169:       eks_cluster_name               = "apps-tools-production"

Reference: https://github.com/terraform-linters/tflint-ruleset-terraform/blob/v0.9.1/docs/rules/terraform_map_duplicate_keys.md

Warning: Missing version constraint for provider "random" in `required_providers` (terraform_required_providers)

  on terraform/environments/data-platform-apps-and-tools/random.tf line 24:
  24: resource "random_password" "datahub_rds" {

Reference: https://github.com/terraform-linters/tflint-ruleset-terraform/blob/v0.9.1/docs/rules/terraform_required_providers.md

tflint_exitcode=2

`Trivy Scan` Success

Show Output

*****************************

Trivy will check the following folders:
terraform/environments/data-platform-apps-and-tools

*****************************

Running Trivy in terraform/environments/data-platform-apps-and-tools
2024-11-28T00:18:44Z	INFO	[vulndb] Need to update DB
2024-11-28T00:18:44Z	INFO	[vulndb] Downloading vulnerability DB...
2024-11-28T00:18:44Z	INFO	[vulndb] Downloading artifact...	repo="public.ecr.aws/aquasecurity/trivy-db:2"
2024-11-28T00:18:47Z	INFO	[vulndb] Artifact successfully downloaded	repo="public.ecr.aws/aquasecurity/trivy-db:2"
2024-11-28T00:18:47Z	INFO	[vuln] Vulnerability scanning is enabled
2024-11-28T00:18:47Z	INFO	[misconfig] Misconfiguration scanning is enabled
2024-11-28T00:18:47Z	INFO	[misconfig] Need to update the built-in checks
2024-11-28T00:18:47Z	INFO	[misconfig] Downloading the built-in checks...
2024-11-28T00:18:47Z	ERROR	[misconfig] Falling back to embedded checks	err="failed to download built-in policies: download error: OCI repository error: 1 error occurred:\n\t* GET https://ghcr.io/v2/aquasecurity/trivy-checks/manifests/1: TOOMANYREQUESTS: retry-after: 75.668µs, allowed: 44000/minute\n\n"
2024-11-28T00:18:47Z	INFO	[secret] Secret scanning is enabled
2024-11-28T00:18:47Z	INFO	[secret] If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2024-11-28T00:18:47Z	INFO	[secret] Please see also https://aquasecurity.github.io/trivy/v0.57/docs/scanner/secret#recommendation for faster secret detection
2024-11-28T00:18:48Z	WARN	[pip] Unable to find python `site-packages` directory. License detection is skipped.	err="site-packages directory not found"
2024-11-28T00:18:49Z	INFO	[terraform scanner] Scanning root module	file_path="."
2024-11-28T00:18:49Z	WARN	[terraform parser] Variable values was not found in the environment or variable files. Evaluating may not work correctly.	module="root" variables="networking"
2024-11-28T00:18:49Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="data.aws_subnet.private" value="cty.NilVal"
2024-11-28T00:18:49Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.auth0_log_streams" value="cty.NilVal"
2024-11-28T00:18:53Z	ERROR	[terraform evaluator] Failed to expand dynamic block.	block="module.cluster_autoscaler_role.data.aws_iam_policy_document.cluster_autoscaler[0]" err="1 error occurred:\n\t* invalid for-each in data.aws_iam_policy_document.cluster_autoscaler[0].dynamic.statement block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\n"
2024-11-28T00:18:53Z	ERROR	[terraform evaluator] Failed to expand dynamic block.	block="module.cluster_autoscaler_role.data.aws_iam_policy_document.cluster_autoscaler[0]" err="1 error occurred:\n\t* invalid for-each in data.aws_iam_policy_document.cluster_autoscaler[0].dynamic.statement block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\n"
2024-11-28T00:18:53Z	ERROR	[terraform evaluator] Failed to expand dynamic block.	block="module.datahub_rds.module.db_instance.aws_db_instance.this[0]" err="2 errors occurred:\n\t* invalid for-each in aws_db_instance.this[0].dynamic.restore_to_point_in_time block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\t* invalid for-each in aws_db_instance.this[0].dynamic.s3_import block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\n"
2024-11-28T00:18:53Z	ERROR	[terraform evaluator] Failed to expand dynamic block.	block="module.datahub_rds.module.db_instance.aws_db_instance.this[0]" err="2 errors occurred:\n\t* invalid for-each in aws_db_instance.this[0].dynamic.restore_to_point_in_time block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\t* invalid for-each in aws_db_instance.this[0].dynamic.s3_import block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\n"
2024-11-28T00:18:53Z	ERROR	[terraform evaluator] Failed to expand dynamic block.	block="module.datahub_rds.module.db_instance.aws_db_instance.this[0]" err="2 errors occurred:\n\t* invalid for-each in aws_db_instance.this[0].dynamic.restore_to_point_in_time block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\t* invalid for-each in aws_db_instance.this[0].dynamic.s3_import block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\n"
2024-11-28T00:18:53Z	ERROR	[terraform evaluator] Failed to expand dynamic block.	block="module.datahub_rds.module.db_instance.aws_db_instance.this[0]" err="2 errors occurred:\n\t* invalid for-each in aws_db_instance.this[0].dynamic.restore_to_point_in_time block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\t* invalid for-each in aws_db_instance.this[0].dynamic.s3_import block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\n"
2024-11-28T00:18:53Z	ERROR	[terraform evaluator] Failed to expand dynamic block.	block="module.datahub_rds.module.db_instance.aws_db_instance.this[0]" err="2 errors occurred:\n\t* invalid for-each in aws_db_instance.this[0].dynamic.restore_to_point_in_time block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\t* invalid for-each in aws_db_instance.this[0].dynamic.s3_import block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\n"
2024-11-28T00:18:53Z	ERROR	[terraform evaluator] Failed to expand dynamic block.	block="module.datahub_rds.module.db_instance.aws_db_instance.this[0]" err="2 errors occurred:\n\t* invalid for-each in aws_db_instance.this[0].dynamic.restore_to_point_in_time block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\t* invalid for-each in aws_db_instance.this[0].dynamic.s3_import block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\n"
2024-11-28T00:18:53Z	ERROR	[terraform evaluator] Failed to expand dynamic block.	block="module.datahub_rds.module.db_instance.aws_db_instance.this[0]" err="2 errors occurred:\n\t* invalid for-each in aws_db_instance.this[0].dynamic.restore_to_point_in_time block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\t* invalid for-each in aws_db_instance.this[0].dynamic.s3_import block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\n"
2024-11-28T00:18:53Z	ERROR	[terraform evaluator] Failed to expand dynamic block.	block="module.datahub_rds.module.db_instance.aws_db_instance.this[0]" err="2 errors occurred:\n\t* invalid for-each in aws_db_instance.this[0].dynamic.restore_to_point_in_time block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\t* invalid for-each in aws_db_instance.this[0].dynamic.s3_import block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\n"
2024-11-28T00:18:53Z	ERROR	[terraform evaluator] Failed to expand dynamic block.	block="module.datahub_rds.module.db_instance.aws_db_instance.this[0]" err="2 errors occurred:\n\t* invalid for-each in aws_db_instance.this[0].dynamic.restore_to_point_in_time block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\t* invalid for-each in aws_db_instance.this[0].dynamic.s3_import block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\n"
2024-11-28T00:18:53Z	ERROR	[terraform evaluator] Failed to expand dynamic block.	block="module.datahub_rds.module.db_instance.aws_db_instance.this[0]" err="2 errors occurred:\n\t* invalid for-each in aws_db_instance.this[0].dynamic.restore_to_point_in_time block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\t* invalid for-each in aws_db_instance.this[0].dynamic.s3_import block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\n"
2024-11-28T00:18:53Z	ERROR	[terraform evaluator] Failed to expand dynamic block.	block="module.datahub_rds.module.db_instance.aws_db_instance.this[0]" err="2 errors occurred:\n\t* invalid for-each in aws_db_instance.this[0].dynamic.restore_to_point_in_time block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\t* invalid for-each in aws_db_instance.this[0].dynamic.s3_import block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\n"
2024-11-28T00:18:53Z	ERROR	[terraform evaluator] Failed to expand dynamic block.	block="module.datahub_rds.module.db_instance.aws_db_instance.this[0]" err="2 errors occurred:\n\t* invalid for-each in aws_db_instance.this[0].dynamic.restore_to_point_in_time block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\t* invalid for-each in aws_db_instance.this[0].dynamic.s3_import block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\n"
2024-11-28T00:18:53Z	ERROR	[terraform evaluator] Failed to expand dynamic block.	block="module.datahub_rds.module.db_instance.aws_db_instance.this[0]" err="2 errors occurred:\n\t* invalid for-each in aws_db_instance.this[0].dynamic.restore_to_point_in_time block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\t* invalid for-each in aws_db_instance.this[0].dynamic.s3_import block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\n"
2024-11-28T00:18:53Z	ERROR	[terraform evaluator] Failed to expand dynamic block.	block="module.datahub_rds.module.db_instance.aws_db_instance.this[0]" err="2 errors occurred:\n\t* invalid for-each in aws_db_instance.this[0].dynamic.restore_to_point_in_time block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\t* invalid for-each in aws_db_instance.this[0].dynamic.s3_import block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\n"
2024-11-28T00:18:53Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.eks.aws_ec2_tag.cluster_primary_security_group" value="cty.NilVal"
2024-11-28T00:18:54Z	ERROR	[terraform evaluator] Failed to expand dynamic block.	block="module.eks.module.kms.data.aws_iam_policy_document.this[0]" err="2 errors occurred:\n\t* invalid for-each in data.aws_iam_policy_document.this[0].dynamic.statement block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\t* invalid for-each in data.aws_iam_policy_document.this[0].dynamic.statement block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\n"
2024-11-28T00:18:54Z	ERROR	[terraform evaluator] Failed to expand dynamic block.	block="module.eks.module.kms.data.aws_iam_policy_document.this[0]" err="2 errors occurred:\n\t* invalid for-each in data.aws_iam_policy_document.this[0].dynamic.statement block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\t* invalid for-each in data.aws_iam_policy_document.this[0].dynamic.statement block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\n"
2024-11-28T00:18:54Z	ERROR	[terraform evaluator] Failed to expand dynamic block.	block="module.eks.module.kms.data.aws_iam_policy_document.this[0]" err="1 error occurred:\n\t* invalid for-each in data.aws_iam_policy_document.this[0].dynamic.statement block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\n"
2024-11-28T00:18:54Z	ERROR	[terraform evaluator] Failed to expand dynamic block.	block="module.eks.module.kms.data.aws_iam_policy_document.this[0]" err="1 error occurred:\n\t* invalid for-each in data.aws_iam_policy_document.this[0].dynamic.statement block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\n"
2024-11-28T00:18:54Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.eks.module.eks_managed_node_group[\"general\"].aws_iam_role_policy_attachment.this" value="cty.NilVal"
2024-11-28T00:18:54Z	ERROR	[terraform evaluator] Failed to expand dynamic block.	block="module.cluster_autoscaler_role.data.aws_iam_policy_document.cluster_autoscaler[0]" err="1 error occurred:\n\t* invalid for-each in data.aws_iam_policy_document.cluster_autoscaler[0].dynamic.statement block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\n"
2024-11-28T00:18:54Z	ERROR	[terraform evaluator] Failed to expand dynamic block.	block="module.cluster_autoscaler_role.data.aws_iam_policy_document.cluster_autoscaler[0]" err="1 error occurred:\n\t* invalid for-each in data.aws_iam_policy_document.cluster_autoscaler[0].dynamic.statement block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\n"
2024-11-28T00:18:55Z	ERROR	[terraform evaluator] Failed to expand dynamic block.	block="module.openmetadata_airflow_rds.module.db_instance.aws_db_instance.this[0]" err="2 errors occurred:\n\t* invalid for-each in aws_db_instance.this[0].dynamic.restore_to_point_in_time block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\t* invalid for-each in aws_db_instance.this[0].dynamic.s3_import block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\n"
2024-11-28T00:18:55Z	ERROR	[terraform evaluator] Failed to expand dynamic block.	block="module.openmetadata_airflow_rds.module.db_instance.aws_db_instance.this[0]" err="2 errors occurred:\n\t* invalid for-each in aws_db_instance.this[0].dynamic.restore_to_point_in_time block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\t* invalid for-each in aws_db_instance.this[0].dynamic.s3_import block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\n"
2024-11-28T00:18:55Z	ERROR	[terraform evaluator] Failed to expand dynamic block.	block="module.openmetadata_airflow_rds.module.db_instance.aws_db_instance.this[0]" err="2 errors occurred:\n\t* invalid for-each in aws_db_instance.this[0].dynamic.restore_to_point_in_time block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\t* invalid for-each in aws_db_instance.this[0].dynamic.s3_import block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\n"
2024-11-28T00:18:55Z	ERROR	[terraform evaluator] Failed to expand dynamic block.	block="module.openmetadata_airflow_rds.module.db_instance.aws_db_instance.this[0]" err="2 errors occurred:\n\t* invalid for-each in aws_db_instance.this[0].dynamic.restore_to_point_in_time block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\t* invalid for-each in aws_db_instance.this[0].dynamic.s3_import block: cannot use a cty.NilVal value in for_each. An iterable collection is required\n\n"
2024-11-28T00:18:56Z	INFO	[terraform executor] Ignore finding	rule="aws-eks-no-public-cluster-access" range="git::https:/github.com/terraform-aws-modules/terraform-aws-eks?ref=2cb1fac31b0fc2dd6a236b0c0678df75819c5a3b/main.tf:37"
2024-11-28T00:18:56Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-egress-sgr" range="git::https:/github.com/terraform-aws-modules/terraform-aws-eks?ref=2cb1fac31b0fc2dd6a236b0c0678df75819c5a3b/node_groups.tf:223"
2024-11-28T00:18:56Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-egress-sgr" range="terraform-aws-modules/security-group/aws/main.tf:533"
2024-11-28T00:18:56Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-egress-sgr" range="terraform-aws-modules/security-group/aws/main.tf:534"
2024-11-28T00:18:56Z	INFO	[terraform executor] Ignore finding	rule="aws-s3-encryption-customer-key" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=v7.1.0/main.tf:171-179"
2024-11-28T00:18:56Z	INFO	[terraform executor] Ignore finding	rule="aws-eks-no-public-cluster-access-to-cidr" range="git::https:/github.com/terraform-aws-modules/terraform-aws-eks?ref=2cb1fac31b0fc2dd6a236b0c0678df75819c5a3b/main.tf:38"
2024-11-28T00:18:56Z	INFO	Number of language-specific files	num=1
2024-11-28T00:18:56Z	INFO	[pip] Detecting vulnerabilities...
2024-11-28T00:18:56Z	INFO	Detected config files	num=10
trivy_exitcode=0

dependabot · 2024-12-02T14:33:46Z

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

dependabot bot requested a review from a team as a code owner November 28, 2024 00:16

dependabot bot added dependencies Pull requests that update a dependency file terraform Pull requests that update Terraform code labels Nov 28, 2024

dependabot bot mentioned this pull request Nov 28, 2024

Update terraform-aws-modules/lambda/aws requirement from ~> 6.0 to ~> 7.15 in /terraform/environments/data-platform-apps-and-tools #8720

Closed

github-actions bot added the environments-repository Used to exclude PRs from this repo in our Slack PR update label Nov 28, 2024

wullub closed this Dec 2, 2024

wullub deleted the dependabot/terraform/terraform/environments/data-platform-apps-and-tools/terraform-aws-modules/lambda/aws-tw-7.16 branch December 2, 2024 14:33

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Update terraform-aws-modules/lambda/aws requirement from ~> 6.0 to ~> 7.16 in /terraform/environments/data-platform-apps-and-tools #8847

Update terraform-aws-modules/lambda/aws requirement from ~> 6.0 to ~> 7.16 in /terraform/environments/data-platform-apps-and-tools #8847

dependabot bot commented on behalf of github Nov 28, 2024

github-actions bot commented Nov 28, 2024

dependabot bot commented on behalf of github Dec 2, 2024

Update terraform-aws-modules/lambda/aws requirement from ~> 6.0 to ~> 7.16 in /terraform/environments/data-platform-apps-and-tools #8847

Update terraform-aws-modules/lambda/aws requirement from ~> 6.0 to ~> 7.16 in /terraform/environments/data-platform-apps-and-tools #8847

Conversation

dependabot bot commented on behalf of github Nov 28, 2024

v7.16.0

7.16.0 (2024-11-26)

Features

7.16.0 (2024-11-26)

Features

7.15.0 (2024-11-18)

Features

7.14.1 (2024-11-17)

Bug Fixes

7.14.0 (2024-10-11)

Features

Bug Fixes

7.13.0 (2024-10-05)

Features

7.12.0 (2024-10-05)

Features

7.11.0 (2024-10-01)

github-actions bot commented Nov 28, 2024

Trivy Scan Success

CTFLint Scan Failed

Trivy Scan Success

dependabot bot commented on behalf of github Dec 2, 2024

`Trivy Scan` Success

`CTFLint Scan` Failed

`Trivy Scan` Success