We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 8114c06 commit 98e8eccCopy full SHA for 98e8ecc
infrastructure/stacks/account_wide/cloudtrail.tf
@@ -1,6 +1,6 @@
1
# CloudTrail trail logging S3 object-level data events
2
+# trivy:ignore:AVD-AWS-0014
3
resource "aws_cloudtrail" "s3_data_events" {
- # checkov:skip=CKV_AWS_252: Justification: No CMK required by design; default SSE-S3 encryption is sufficient.
4
# checkov:skip=CKV2_AWS_10: Justification: CloudWatch Logs integration is not required for this S3 data events trail.
5
# checkov:skip=CKV_AWS_67: We are only enabling S3 object-level data events and don't need all regions to be enabled.
6
name = "${local.resource_prefix}-${var.cloudtrail_trail_name}"
0 commit comments