Skip to content

mappings/build.py: many "file not found" messages when running the build.py program #253

@climbertjh

Description

@climbertjh

What is the problem?

I have been trying to re-build the rule-sets and have found that there seem to be many guard rules referenced in the rule-set files which are not found in the rules/aws area of the repository.

Is this expected behavior or was there a missed commit?

Example:

 python mappings/build.py -r 1.0.0
hipaa-security
file not found: rules/aws/secrets_manager/secretsmanager_scheduled_rotation_success_check.guard
file not found: rules/aws/secrets_manager/secretsmanager_secret_periodic_rotation.guard
file not found: rules/aws/secrets_manager/secretsmanager_secret_unused.guard
file not found: rules/aws/elastic_load_balancing/elb_deletion_protection_enabled.guard
file not found: rules/aws/api_gateway_v2/api_gw_ssl_enabled.guard
file not found: rules/aws/amazon_redshift/redshift_cluster_kms_enabled.guard
file not found: rules/aws/amazon_redshift/redshift_require_tls_ssl.guard
us-nydfs
file not found: rules/aws/elastic_load_balancing/elb_deletion_protection_enabled.guard
file not found: rules/aws/api_gateway_v2/api_gw_ssl_enabled.guard
file not found: rules/aws/api_gateway_v2/api_gw_associated_with_waf.guard
file not found: rules/aws/secrets_manager/secretsmanager_scheduled_rotation_success_check.guard
nerc
file not found: rules/aws/amazon_redshift/redshift_require_tls_ssl.guard
cmmc-level-3
file not found: rules/aws/secrets_manager/secretsmanager_scheduled_rotation_success_check.guard
file not found: rules/aws/api_gateway_v2/api_gw_associated_with_waf.guard
file not found: rules/aws/api_gateway_v2/api_gw_ssl_enabled.guard
file not found: rules/aws/amazon_redshift/redshift_require_tls_ssl.guard
file not found: rules/aws/amazon_redshift/redshift_cluster_kms_enabled.guard
file not found: rules/aws/elastic_load_balancing/elb_deletion_protection_enabled.guard
.
.
.

Reproduction Steps

  1. clone the repo
  2. cd to aws-guard-rules-registry
  3. run python mappings/build.py -r 1.0.0

What did you expect to happen?

I was expecting to have a clean build of the latest rule-sets with no error messages and no files not found.

What actually happened?

Received errors when running the command.

Furthermore, I checked the set of rules in guard-rules-registry-all-rules.guard and based on the main branch of the repo, there are 113 rules. By using the docker container that is referenced in the help, I only find 67 rules in the docker container.

How many rules are expected to be provided in the rules registry?

Where should I look to obtain all the referenced (but missing) rule files?

CloudFormation Guard Version

cfn-guard 3.0.3

OS

Ubuntu (WSL2)

OS Version

22.04

Other information

No response

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions