Adding checkov scanner exceptions.

boueya · boueya · commit 1b593d84f5e1 · 2025-01-21T09:20:56.000-08:00
diff --git a/aws_sra_examples/terraform/solutions/inspector/configuration/main.tf b/aws_sra_examples/terraform/solutions/inspector/configuration/main.tf
@@ -437,6 +437,7 @@ resource "aws_sns_topic_subscription" "inspector_org_topic_subscription" {
 ########################################################################
 # AWS SQS Queue
 resource "aws_sqs_queue" "inspector_org_dlq" {
+  # checkov:skip=CKV2_AWS_73: Using default KMS key
   name              = "${var.sra_solution_name}-dlq"
   kms_master_key_id = "alias/aws/sqs"
 
diff --git a/aws_sra_examples/terraform/solutions/macie/configuration/main.tf b/aws_sra_examples/terraform/solutions/macie/configuration/main.tf
@@ -377,6 +377,7 @@ resource "aws_sns_topic_subscription" "r_macie_org_topic_subscription" {
 }
 
 resource "aws_sqs_queue" "macie_org_dlq" {
+  # checkov:skip=CKV2_AWS_73: Using default KMS key
   name              = "${var.p_sra_solution_name}-dlq"
   kms_master_key_id = "alias/aws/sqs"
   tags = {
diff --git a/aws_sra_examples/terraform/solutions/security_hub/configuration/main.tf b/aws_sra_examples/terraform/solutions/security_hub/configuration/main.tf
@@ -435,6 +435,7 @@ resource "aws_sns_topic_subscription" "securityhub_org_topic_subscription" {
 
 # AWS SQS Queue
 resource "aws_sqs_queue" "securityhub_org_dlq" {
+  # checkov:skip=CKV2_AWS_73: Using default KMS key
   name              = "${var.sra_solution_name}-dlq"
   kms_master_key_id = "alias/aws/sqs"
 

Original file line number	Diff line number	Diff line change
`@@ -377,6 +377,7 @@ resource "aws_sns_topic_subscription" "r_macie_org_topic_subscription" {`
`377`	`377`	`}`
`378`	`378`
`379`	`379`	`resource "aws_sqs_queue" "macie_org_dlq" {`
	`380`	`+ # checkov:skip=CKV2_AWS_73: Using default KMS key`
`380`	`381`	`name = "${var.p_sra_solution_name}-dlq"`
`381`	`382`	`kms_master_key_id = "alias/aws/sqs"`
`382`	`383`	`tags = {`