Skip to content

Commit a98dda0

Browse files
Update rule metadata for 3.20 (#1280)
1 parent 6507066 commit a98dda0

File tree

3 files changed

+11
-18
lines changed

3 files changed

+11
-18
lines changed

python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S6303.html

Lines changed: 0 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -76,15 +76,8 @@ <h2>Compliant Solution</h2>
7676
</pre>
7777
<h2>See</h2>
7878
<ul>
79-
<li> <a href="https://owasp.org/Top10/A02_2021-Cryptographic_Failures/">OWASP Top 10 2021 Category A2</a> - Cryptographic Failures </li>
80-
<li> <a href="https://owasp.org/Top10/A04_2021-Insecure_Design/">OWASP Top 10 2021 Category A4</a> - Insecure Design </li>
81-
<li> <a href="https://owasp.org/Top10/A05_2021-Security_Misconfiguration/">OWASP Top 10 2021 Category A5</a> - Security Misconfiguration </li>
8279
<li> <a href="https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Overview.Encryption.html">AWS Documentation</a> - Encrypting Amazon RDS
8380
resources </li>
84-
<li> <a href="https://owasp.org/www-project-top-ten/2017/A3_2017-Sensitive_Data_Exposure">OWASP Top 10 2017 Category A3</a> - Sensitive Data
85-
Exposure </li>
86-
<li> <a href="https://owasp.org/www-project-top-ten/2017/A6_2017-Security_Misconfiguration.html">OWASP Top 10 2017 Category A6</a> - Security
87-
Misconfiguration </li>
8881
<li> <a href="https://cwe.mitre.org/data/definitions/311">MITRE, CWE-311</a> - Missing Encryption of Sensitive Data </li>
8982
</ul>
9083

python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S6308.html

Lines changed: 10 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -1,12 +1,12 @@
1-
<p>Amazon OpenSearch Service is a managed service to host OpenSearch instances. It replaces Elasticsearch Service, which has been deprecated. To
2-
harden domain (cluster) data in case of unauthorized access, OpenSearch provides data-at-rest encryption if the engine is OpenSearch or Elasticsearch
3-
with a version of 5.1 or above. Enabling encryption at rest will help protect:</p>
1+
<p>Amazon OpenSearch Service is a managed service to host OpenSearch instances. It replaces Elasticsearch Service, which has been deprecated.</p>
2+
<p>To harden domain (cluster) data in case of unauthorized access, OpenSearch provides data-at-rest encryption if the engine is OpenSearch (any
3+
version), or Elasticsearch with a version of 5.1 or above. Enabling encryption at rest will help protect:</p>
44
<ul>
5-
<li> Indices </li>
6-
<li> Logs </li>
7-
<li> Swap files </li>
8-
<li> Data in the application directory </li>
9-
<li> Automated snapshots </li>
5+
<li> indices </li>
6+
<li> logs </li>
7+
<li> swap files </li>
8+
<li> data in the application directory </li>
9+
<li> automated snapshots </li>
1010
</ul>
1111
<p>Thus, adversaries cannot access the data if they gain physical access to the storage medium.</p>
1212
<h2>Ask Yourself Whether</h2>
@@ -16,8 +16,8 @@ <h2>Ask Yourself Whether</h2>
1616
</ul>
1717
<p>There is a risk if you answered yes to any of those questions.</p>
1818
<h2>Recommended Secure Coding Practices</h2>
19-
<p>It’s recommended to encrypt OpenSearch domains that contain sensitive information. OpenSearch handles encryption and decryption transparently, so
20-
no further modifications to the application are necessary.</p>
19+
<p>It is recommended to encrypt OpenSearch domains that contain sensitive information.</p>
20+
<p>OpenSearch handles encryption and decryption transparently, so no further modifications to the application are necessary.</p>
2121
<h2>Sensitive Code Example</h2>
2222
<p>For <a href="https://docs.aws.amazon.com/cdk/api/v2/python/aws_cdk.aws_opensearchservice/Domain.html">aws_cdk.aws_opensearchservice.Domain</a>:</p>
2323
<pre>

sonarpedia.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@
33
"languages": [
44
"PY"
55
],
6-
"latest-update": "2022-10-14T12:58:57.615105Z",
6+
"latest-update": "2022-11-03T10:54:41.092693Z",
77
"options": {
88
"no-language-in-filenames": true,
99
"preserve-filenames": true

0 commit comments

Comments
 (0)