-
Notifications
You must be signed in to change notification settings - Fork 28
Description
What is the problem?
I have been trying to re-build the rule-sets and have found that there seem to be many guard rules referenced in the rule-set files which are not found in the rules/aws
area of the repository.
Is this expected behavior or was there a missed commit?
Example:
python mappings/build.py -r 1.0.0
hipaa-security
file not found: rules/aws/secrets_manager/secretsmanager_scheduled_rotation_success_check.guard
file not found: rules/aws/secrets_manager/secretsmanager_secret_periodic_rotation.guard
file not found: rules/aws/secrets_manager/secretsmanager_secret_unused.guard
file not found: rules/aws/elastic_load_balancing/elb_deletion_protection_enabled.guard
file not found: rules/aws/api_gateway_v2/api_gw_ssl_enabled.guard
file not found: rules/aws/amazon_redshift/redshift_cluster_kms_enabled.guard
file not found: rules/aws/amazon_redshift/redshift_require_tls_ssl.guard
us-nydfs
file not found: rules/aws/elastic_load_balancing/elb_deletion_protection_enabled.guard
file not found: rules/aws/api_gateway_v2/api_gw_ssl_enabled.guard
file not found: rules/aws/api_gateway_v2/api_gw_associated_with_waf.guard
file not found: rules/aws/secrets_manager/secretsmanager_scheduled_rotation_success_check.guard
nerc
file not found: rules/aws/amazon_redshift/redshift_require_tls_ssl.guard
cmmc-level-3
file not found: rules/aws/secrets_manager/secretsmanager_scheduled_rotation_success_check.guard
file not found: rules/aws/api_gateway_v2/api_gw_associated_with_waf.guard
file not found: rules/aws/api_gateway_v2/api_gw_ssl_enabled.guard
file not found: rules/aws/amazon_redshift/redshift_require_tls_ssl.guard
file not found: rules/aws/amazon_redshift/redshift_cluster_kms_enabled.guard
file not found: rules/aws/elastic_load_balancing/elb_deletion_protection_enabled.guard
.
.
.
Reproduction Steps
- clone the repo
- cd to aws-guard-rules-registry
- run
python mappings/build.py -r 1.0.0
What did you expect to happen?
I was expecting to have a clean build of the latest rule-sets with no error messages and no files not found.
What actually happened?
Received errors when running the command.
Furthermore, I checked the set of rules in guard-rules-registry-all-rules.guard
and based on the main
branch of the repo, there are 113 rules. By using the docker container that is referenced in the help, I only find 67 rules in the docker container.
How many rules are expected to be provided in the rules registry?
Where should I look to obtain all the referenced (but missing) rule files?
CloudFormation Guard Version
cfn-guard 3.0.3
OS
Ubuntu (WSL2)
OS Version
22.04
Other information
No response