Difference in violated policies for the same terraform file

[harkirat22]

• terrascan version: v1.31
• Operating System: macOS

Description

I scanned the terraform file with the following configuration:

resource "aws_iam_policy" "privileged-instance-policy" {
name = "privileged-instance-policy"
description = "Provides full access to AWS services and resources."
policy = <<POLICY
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
""
],
"Resource": ""
}
]
}
POLICY
}

Tell us what happened, what went wrong, and what you expected to happen.

What I Did

used command: terrascan scan -t aws -f and in the result there was no violation related to iam policy having admin privileges.

Then I used : terrascan scan -t aws -f -p pkg/policies/opa/rego/aws/aws_iam_policy.
Result: There was a violation for the above terraform configuration as expected.