fix checkov warning

Author: iakov-gan

data-collection/deploy/deploy-data-collection.yaml

@@ -543,6 +543,11 @@ Resources:
       Runtime: python3.13
       FunctionName: !Sub ${ResourcePrefix}analytics-Lambda
       Description: "Lambda function to collect general deployment metrics"
+    Metadata:
+      checkov:
+        skip:
+          - id: CKV_AWS_363
+            comment: "Using latest available Python runtime"
       Handler: index.lambda_handler
       MemorySize: 128
       Role: !GetAtt LambdaAnalyticsRole.Arn

data-collection/deploy/deploy-in-linked-account.yaml

@@ -228,7 +228,7 @@ Resources:
         Statement:
           - Effect: "Allow"
             Action:
-              - "budgets:ViewBudget"
+              - "budgets:DescribeBudgets"
               - "budgets:ListTagsForResource"
             Resource: !Sub "arn:${AWS::Partition}:budgets::${AWS::AccountId}:budget/*"
       Roles:

data-collection/deploy/module-backup.yaml

@@ -276,6 +276,11 @@ Resources:
     Properties:
       LogGroupName: !Sub "/aws/lambda/${LambdaFunction}"
       RetentionInDays: 60
+    Metadata:
+      checkov:
+        skip:
+          - id: CKV_AWS_158
+            comment: "Using default AWS managed encryption for cost optimization"
 
   'Fn::ForEach::Object':
     - AwsObject