Add missing resource to SyncKnowledgeBase managed policy suppression

kris-szlapa · kris-szlapa · commit fae978e4bdf4 · 2025-08-06T07:01:57.000Z
diff --git a/packages/cdk/nagSuppressions.ts b/packages/cdk/nagSuppressions.ts
@@ -172,6 +172,7 @@ export const nagSuppressions = (stack: Stack) => {
         appliesTo: [
           "Resource::arn:aws:bedrock:eu-west-2:undefined:knowledge-base/*",
           "Resource::arn:aws:bedrock:eu-west-2:undefined:knowledge-base/*/data-source/*",
+          "Resource::arn:aws:bedrock:eu-west-2:591291862413:knowledge-base/*",
           "Resource::arn:aws:bedrock:eu-west-2:591291862413:knowledge-base/*/data-source/*"
         ]
       }

Original file line number	Diff line number	Diff line change
`@@ -172,6 +172,7 @@ export const nagSuppressions = (stack: Stack) => {`
`172`	`172`	`appliesTo: [`
`173`	`173`	`"Resource::arn:aws:bedrock:eu-west-2:undefined:knowledge-base/*",`
`174`	`174`	`"Resource::arn:aws:bedrock:eu-west-2:undefined:knowledge-base//data-source/",`
	`175`	`+ "Resource::arn:aws:bedrock:eu-west-2:591291862413:knowledge-base/*",`
`175`	`176`	`"Resource::arn:aws:bedrock:eu-west-2:591291862413:knowledge-base//data-source/"`
`176`	`177`	`]`
`177`	`178`	`}`