update CWEs for terraform rules (#3666)

Author: inkz

terraform/aws/security/aws-ec2-has-public-ip.yaml

@@ -31,7 +31,7 @@ rules:
     - A05:2017 - Broken Access Control
     - A01:2021 - Broken Access Control
     cwe:
-    - 'CWE-284: Improper Access Control'
+    - 'CWE-1220: Insufficient Granularity of Access Control'
     references:
     - https://owasp.org/Top10/A01_2021-Broken_Access_Control
     subcategory:

terraform/aws/security/aws-ec2-security-group-allows-public-ingress.yaml

@@ -73,7 +73,7 @@ rules:
     owasp:
     - A01:2021 - Broken Access Control
     cwe:
-    - 'CWE-284: Improper Access Control'
+    - 'CWE-1220: Insufficient Granularity of Access Control'
     references:
     - https://owasp.org/Top10/A01_2021-Broken_Access_Control/
     - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/security_group

terraform/aws/security/aws-network-acl-allows-all-ports.yaml

@@ -49,7 +49,7 @@ rules:
     owasp:
     - A01:2021 - Broken Access Control
     cwe:
-    - 'CWE-284: Improper Access Control'
+    - 'CWE-1220: Insufficient Granularity of Access Control'
     references:
     - https://owasp.org/Top10/A01_2021-Broken_Access_Control/
     - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/network_acl

terraform/aws/security/aws-network-acl-allows-public-ingress.yaml

@@ -72,7 +72,7 @@ rules:
     owasp:
     - A01:2021 - Broken Access Control
     cwe:
-    - 'CWE-284: Improper Access Control'
+    - 'CWE-1220: Insufficient Granularity of Access Control'
     references:
     - https://owasp.org/Top10/A01_2021-Broken_Access_Control/
     - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/network_acl

terraform/aws/security/aws-redshift-cluster-encrypted-with-cmk.yaml

@@ -23,7 +23,7 @@ rules:
     - A05:2017 - Broken Access Control
     - A01:2021 - Broken Access Control
     cwe:
-    - 'CWE-284: Improper Access Control'
+    - 'CWE-1220: Insufficient Granularity of Access Control'
     references:
     - https://owasp.org/Top10/A01_2021-Broken_Access_Control
     subcategory:

terraform/aws/security/aws-subnet-has-public-ip-address.yaml

@@ -34,7 +34,7 @@ rules:
     owasp:
     - A01:2021 - Broken Access Control
     cwe:
-    - 'CWE-284: Improper Access Control'
+    - 'CWE-1220: Insufficient Granularity of Access Control'
     references:
     - https://owasp.org/Top10/A01_2021-Broken_Access_Control/
     - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/subnet#map_public_ip_on_launch

terraform/aws/security/aws-transfer-server-is-public.yaml

@@ -24,7 +24,7 @@ rules:
     - A05:2017 - Broken Access Control
     - A01:2021 - Broken Access Control
     cwe:
-    - 'CWE-284: Improper Access Control'
+    - 'CWE-1220: Insufficient Granularity of Access Control'
     references:
     - https://owasp.org/Top10/A01_2021-Broken_Access_Control
     subcategory:

terraform/aws/security/unrestricted-github-oidc-policy.yaml

@@ -14,7 +14,7 @@ rules:
         - A05:2017 - Sensitive Data Exposure
         - A01:2021 - Broken Access Control
       cwe:
-        - "CWE-284: Improper Access Control"
+        - "CWE-1220: Insufficient Granularity of Access Control"
       references:
         - https://docs.github.com/en/actions/deployment/security-hardening-your-deployments/configuring-openid-connect-in-amazon-web-services#configuring-the-role-and-trust-policy
         - https://dagrz.com/writing/aws-security/hacking-github-aws-oidc/

terraform/azure/best-practice/azure-networkinterface-enable-ip-forwarding.yaml

@@ -15,7 +15,7 @@ rules:
     - A05:2017 - Broken Access Control
     - A01:2021 - Broken Access Control
     cwe:
-    - 'CWE-284: Improper Access Control'
+    - 'CWE-1220: Insufficient Granularity of Access Control'
     category: security
     technology:
     - terraform

terraform/azure/security/aks/azure-aks-apiserver-auth-ip-ranges.yaml

@@ -19,7 +19,7 @@ rules:
     - A05:2017 - Broken Access Control
     - A01:2021 - Broken Access Control
     cwe:
-    - 'CWE-284: Improper Access Control'
+    - 'CWE-1220: Insufficient Granularity of Access Control'
     category: security
     technology:
     - terraform