Update nag suppressions to include new wildcard permissions

kris-szlapa · kris-szlapa · commit 3a1efe66e6a7 · 2025-07-29T12:54:11.000Z
diff --git a/packages/cdk/nagSuppressions.ts b/packages/cdk/nagSuppressions.ts
@@ -99,7 +99,8 @@ export const nagSuppressions = (stack: Stack) => {
           "Resource::arn:aws:bedrock:eu-west-2:undefined:knowledge-base/*",
           "Resource::arn:aws:bedrock:eu-west-2:591291862413:knowledge-base/*",
           "Resource::arn:aws:aoss:eu-west-2:undefined:collection/*",
-          "Resource::arn:aws:aoss:eu-west-2:591291862413:collection/*"
+          "Resource::arn:aws:aoss:eu-west-2:591291862413:collection/*",
+          "Resource::*"
         ]
       }
     ]
@@ -135,7 +136,8 @@ export const nagSuppressions = (stack: Stack) => {
           "Resource::arn:aws:lambda:eu-west-2:undefined:function:*",
           "Resource::arn:aws:lambda:eu-west-2:591291862413:function:*",
           "Resource::arn:aws:bedrock:eu-west-2:undefined:guardrail/*",
-          "Resource::arn:aws:bedrock:eu-west-2:591291862413:guardrail/*"
+          "Resource::arn:aws:bedrock:eu-west-2:591291862413:guardrail/*",
+          "Resource::arn:aws:bedrock:eu-west-2:591291862413:knowledge-base/*"
         ]
       }
     ]

Original file line number	Diff line number	Diff line change
`@@ -99,7 +99,8 @@ export const nagSuppressions = (stack: Stack) => {`
`99`	`99`	`"Resource::arn:aws:bedrock:eu-west-2:undefined:knowledge-base/*",`
`100`	`100`	`"Resource::arn:aws:bedrock:eu-west-2:591291862413:knowledge-base/*",`
`101`	`101`	`"Resource::arn:aws:aoss:eu-west-2:undefined:collection/*",`
`102`		`- "Resource::arn:aws:aoss:eu-west-2:591291862413:collection/*"`
	`102`	`+ "Resource::arn:aws:aoss:eu-west-2:591291862413:collection/*",`
	`103`	`+ "Resource::*"`
`103`	`104`	`]`
`104`	`105`	`}`
`105`	`106`	`]`
`@@ -135,7 +136,8 @@ export const nagSuppressions = (stack: Stack) => {`
`135`	`136`	`"Resource::arn:aws:lambda:eu-west-2:undefined:function:*",`
`136`	`137`	`"Resource::arn:aws:lambda:eu-west-2:591291862413:function:*",`
`137`	`138`	`"Resource::arn:aws:bedrock:eu-west-2:undefined:guardrail/*",`
`138`		`- "Resource::arn:aws:bedrock:eu-west-2:591291862413:guardrail/*"`
	`139`	`+ "Resource::arn:aws:bedrock:eu-west-2:591291862413:guardrail/*",`
	`140`	`+ "Resource::arn:aws:bedrock:eu-west-2:591291862413:knowledge-base/*"`
`139`	`141`	`]`
`140`	`142`	`}`
`141`	`143`	`]`