Skip to content

Trivy Config Demo: update main.tf#35

Open
austimkelly wants to merge 1 commit intoaustimkelly:mainfrom
Atmosera-adv-sec-prep:demo_trivy_config
Open

Trivy Config Demo: update main.tf#35
austimkelly wants to merge 1 commit intoaustimkelly:mainfrom
Atmosera-adv-sec-prep:demo_trivy_config

Conversation

@austimkelly
Copy link
Owner

No description provided.


resource "aws_api_gateway_domain_name" "valid_security_policy" {
security_policy = "TLS_1_2"
security_policy = "TLS_1_1"

Check failure

Code scanning / defsec

API Gateway domain name uses outdated SSL/TLS protocols.

Domain name is configured with an outdated TLS policy.

resource "aws_api_gateway_domain_name" "valid_security_policy" {
security_policy = "TLS_1_2"
security_policy = "TLS_1_1"

Check failure

Code scanning / Trivy

API Gateway domain name uses outdated SSL/TLS protocols.

Artifact: iac-misconfiguration/main.tf Type: terraform Vulnerability AVD-AWS-0005 Severity: HIGH Message: Domain name is configured with an outdated TLS policy. Link: [AVD-AWS-0005](https://avd.aquasec.com/misconfig/avd-aws-0005)
@austimkelly austimkelly changed the title Update main.tf Trivy Config Demo: update main.tf May 14, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant