You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Trivy will check the following folders:
terraform/environments/bootstrap/single-sign-on
Running Trivy in terraform/environments/bootstrap/single-sign-on
2024-07-18T13:27:38Z INFO Need to update DB
2024-07-18T13:27:38Z INFO Downloading DB... repository="ghcr.io/aquasecurity/trivy-db:2"
2024-07-18T13:27:40Z INFO Vulnerability scanning is enabled
2024-07-18T13:27:40Z INFO Misconfiguration scanning is enabled
2024-07-18T13:27:40Z INFO Need to update the built-in policies
2024-07-18T13:27:40Z INFO Downloading the built-in policies...
74.86 KiB / 74.86 KiB [-----------------------------------------------------------] 100.00% ? p/s 0s2024-07-18T13:27:40Z INFO Secret scanning is enabled
2024-07-18T13:27:40Z INFO If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2024-07-18T13:27:40Z INFO Please see also https://aquasecurity.github.io/trivy/v0.53/docs/scanner/secret#recommendation for faster secret detection
2024-07-18T13:27:41Z INFO Number of language-specific files num=0
2024-07-18T13:27:41Z INFO Detected config files num=1
</details> #### `Checkov Scan` Success
<details><summary>Show Output</summary>
```hcl
*****************************
Checkov will check the following folders:
terraform/environments/bootstrap/single-sign-on
*****************************
Running Checkov in terraform/environments/bootstrap/single-sign-on
Excluding the following checks: CKV_GIT_1,CKV_AWS_126,CKV2_AWS_38,CKV2_AWS_39
terraform scan results:
Passed checks: 96, Failed checks: 0, Skipped checks: 50
checkov_exitcode=0
CTFLint Scan Success
Show Output
*****************************
Setting default tflint config...
Running tflint --init...
Installing "terraform" plugin...
Installed "terraform" (source: github.com/terraform-linters/tflint-ruleset-terraform, version:0.5.0)
tflint will check the following folders:
terraform/environments/bootstrap/single-sign-on
*****************************
Running tflint in terraform/environments/bootstrap/single-sign-on
Excluding the following checks: terraform_unused_declarations
tflint_exitcode=0
Trivy Scan Success
Show Output
*****************************
Trivy will check the following folders:
terraform/environments/bootstrap/single-sign-on
*****************************
Running Trivy in terraform/environments/bootstrap/single-sign-on
2024-07-18T13:27:38Z INFO Need to update DB
2024-07-18T13:27:38Z INFO Downloading DB...repository="ghcr.io/aquasecurity/trivy-db:2"2024-07-18T13:27:40Z INFO Vulnerability scanning is enabled
2024-07-18T13:27:40Z INFO Misconfiguration scanning is enabled
2024-07-18T13:27:40Z INFO Need to update the built-in policies
2024-07-18T13:27:40Z INFO Downloading the built-in policies...74.86 KiB /74.86 KiB [-----------------------------------------------------------] 100.00%? p/s 0s2024-07-18T13:27:40Z INFO Secret scanning is enabled
2024-07-18T13:27:40Z INFO If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2024-07-18T13:27:40Z INFO Please see also https://aquasecurity.github.io/trivy/v0.53/docs/scanner/secret#recommendation for faster secret detection2024-07-18T13:27:41Z INFO Number of language-specific files num=02024-07-18T13:27:41Z INFO Detected config files num=1
policies.tf (terraform)
=======================
Tests:620 (SUCCESSES:0, FAILURES:0, EXCEPTIONS:620)
Failures:0 (HIGH:0, CRITICAL:0)
trivy_exitcode=0
julialawrence
changed the title
Adding sso:CreateApplicationAssignment so can manage QS Groups via Consoe
Adding sso:CreateApplicationAssignment so can manage QS Groups via Console
Jul 18, 2024
Trivy will check the following folders:
terraform/environments/bootstrap/single-sign-on
Running Trivy in terraform/environments/bootstrap/single-sign-on
2024-07-18T13:29:09Z INFO Need to update DB
2024-07-18T13:29:09Z INFO Downloading DB... repository="ghcr.io/aquasecurity/trivy-db:2"
2024-07-18T13:29:11Z INFO Vulnerability scanning is enabled
2024-07-18T13:29:11Z INFO Misconfiguration scanning is enabled
2024-07-18T13:29:11Z INFO Need to update the built-in policies
2024-07-18T13:29:11Z INFO Downloading the built-in policies...
74.86 KiB / 74.86 KiB [-----------------------------------------------------------] 100.00% ? p/s 0s2024-07-18T13:29:11Z INFO Secret scanning is enabled
2024-07-18T13:29:11Z INFO If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2024-07-18T13:29:11Z INFO Please see also https://aquasecurity.github.io/trivy/v0.53/docs/scanner/secret#recommendation for faster secret detection
2024-07-18T13:29:12Z INFO Number of language-specific files num=0
2024-07-18T13:29:12Z INFO Detected config files num=1
</details> #### `Checkov Scan` Success
<details><summary>Show Output</summary>
```hcl
*****************************
Checkov will check the following folders:
terraform/environments/bootstrap/single-sign-on
*****************************
Running Checkov in terraform/environments/bootstrap/single-sign-on
Excluding the following checks: CKV_GIT_1,CKV_AWS_126,CKV2_AWS_38,CKV2_AWS_39
terraform scan results:
Passed checks: 96, Failed checks: 0, Skipped checks: 50
checkov_exitcode=0
CTFLint Scan Success
Show Output
*****************************
Setting default tflint config...
Running tflint --init...
Installing "terraform" plugin...
Installed "terraform" (source: github.com/terraform-linters/tflint-ruleset-terraform, version:0.5.0)
tflint will check the following folders:
terraform/environments/bootstrap/single-sign-on
*****************************
Running tflint in terraform/environments/bootstrap/single-sign-on
Excluding the following checks: terraform_unused_declarations
tflint_exitcode=0
Trivy Scan Success
Show Output
*****************************
Trivy will check the following folders:
terraform/environments/bootstrap/single-sign-on
*****************************
Running Trivy in terraform/environments/bootstrap/single-sign-on
2024-07-18T13:29:09Z INFO Need to update DB
2024-07-18T13:29:09Z INFO Downloading DB...repository="ghcr.io/aquasecurity/trivy-db:2"2024-07-18T13:29:11Z INFO Vulnerability scanning is enabled
2024-07-18T13:29:11Z INFO Misconfiguration scanning is enabled
2024-07-18T13:29:11Z INFO Need to update the built-in policies
2024-07-18T13:29:11Z INFO Downloading the built-in policies...74.86 KiB /74.86 KiB [-----------------------------------------------------------] 100.00%? p/s 0s2024-07-18T13:29:11Z INFO Secret scanning is enabled
2024-07-18T13:29:11Z INFO If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2024-07-18T13:29:11Z INFO Please see also https://aquasecurity.github.io/trivy/v0.53/docs/scanner/secret#recommendation for faster secret detection2024-07-18T13:29:12Z INFO Number of language-specific files num=02024-07-18T13:29:12Z INFO Detected config files num=1
policies.tf (terraform)
=======================
Tests:620 (SUCCESSES:0, FAILURES:0, EXCEPTIONS:620)
Failures:0 (HIGH:0, CRITICAL:0)
trivy_exitcode=0
Trivy will check the following folders:
terraform/environments/bootstrap/single-sign-on
Running Trivy in terraform/environments/bootstrap/single-sign-on
2024-07-18T13:39:26Z INFO Need to update DB
2024-07-18T13:39:26Z INFO Downloading DB... repository="ghcr.io/aquasecurity/trivy-db:2"
2024-07-18T13:39:28Z INFO Vulnerability scanning is enabled
2024-07-18T13:39:28Z INFO Misconfiguration scanning is enabled
2024-07-18T13:39:28Z INFO Need to update the built-in policies
2024-07-18T13:39:28Z INFO Downloading the built-in policies...
74.86 KiB / 74.86 KiB [-----------------------------------------------------------] 100.00% ? p/s 0s2024-07-18T13:39:28Z INFO Secret scanning is enabled
2024-07-18T13:39:28Z INFO If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2024-07-18T13:39:28Z INFO Please see also https://aquasecurity.github.io/trivy/v0.53/docs/scanner/secret#recommendation for faster secret detection
2024-07-18T13:39:29Z INFO Number of language-specific files num=0
2024-07-18T13:39:29Z INFO Detected config files num=1
</details> #### `Checkov Scan` Success
<details><summary>Show Output</summary>
```hcl
*****************************
Checkov will check the following folders:
terraform/environments/bootstrap/single-sign-on
*****************************
Running Checkov in terraform/environments/bootstrap/single-sign-on
Excluding the following checks: CKV_GIT_1,CKV_AWS_126,CKV2_AWS_38,CKV2_AWS_39
terraform scan results:
Passed checks: 96, Failed checks: 0, Skipped checks: 50
checkov_exitcode=0
CTFLint Scan Success
Show Output
*****************************
Setting default tflint config...
Running tflint --init...
Installing "terraform" plugin...
Installed "terraform" (source: github.com/terraform-linters/tflint-ruleset-terraform, version:0.5.0)
tflint will check the following folders:
terraform/environments/bootstrap/single-sign-on
*****************************
Running tflint in terraform/environments/bootstrap/single-sign-on
Excluding the following checks: terraform_unused_declarations
tflint_exitcode=0
Trivy Scan Success
Show Output
*****************************
Trivy will check the following folders:
terraform/environments/bootstrap/single-sign-on
*****************************
Running Trivy in terraform/environments/bootstrap/single-sign-on
2024-07-18T13:39:26Z INFO Need to update DB
2024-07-18T13:39:26Z INFO Downloading DB...repository="ghcr.io/aquasecurity/trivy-db:2"2024-07-18T13:39:28Z INFO Vulnerability scanning is enabled
2024-07-18T13:39:28Z INFO Misconfiguration scanning is enabled
2024-07-18T13:39:28Z INFO Need to update the built-in policies
2024-07-18T13:39:28Z INFO Downloading the built-in policies...74.86 KiB /74.86 KiB [-----------------------------------------------------------] 100.00%? p/s 0s2024-07-18T13:39:28Z INFO Secret scanning is enabled
2024-07-18T13:39:28Z INFO If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2024-07-18T13:39:28Z INFO Please see also https://aquasecurity.github.io/trivy/v0.53/docs/scanner/secret#recommendation for faster secret detection2024-07-18T13:39:29Z INFO Number of language-specific files num=02024-07-18T13:39:29Z INFO Detected config files num=1
policies.tf (terraform)
=======================
Tests:620 (SUCCESSES:0, FAILURES:0, EXCEPTIONS:620)
Failures:0 (HIGH:0, CRITICAL:0)
trivy_exitcode=0
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
julialawrence
had a problem deploying
to
production
GitHub Actions
Failure
A reference to the issue / Description of it
ministryofjustice/analytical-platform#4271
We need to be able to add additional Identity Center groups to QuickSight but doing so via Terraform results in attempt to replace the whole subscription:
https://github.com/ministryofjustice/modernisation-platform-environments/actions/runs/9990342858/job/27610845085?pr=7138#step:11:703
We are raising a bug ticket with the aws provider but in the meantime we need to add additional groups to enable testing.
How does this PR fix the problem?
This SSO permission will allow us to add groups via the QuickSight admin console since the groupings are managed via Identity Center
How has this been tested?
It hasn't. It needs to be tested post-deployment. The specific permission was identified after a cloudtrail search.
Deployment Plan / Instructions
There shouldn't be any impact on deployment.
Checklist (check
xin[ ]of list items)