Skip to content
Merged
Changes from 1 commit
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
17 changes: 9 additions & 8 deletions checkov/terraform/checks/resource/aws/EKSControlPlaneLogging.py
Original file line number Diff line number Diff line change
Expand Up @@ -19,14 +19,15 @@ def scan_resource_conf(self, conf):
:return: <CheckResult>
"""
log_types = ["api", "audit", "authenticator", "controllerManager", "scheduler"]
if "enabled_cluster_log_types" in conf.keys() and conf["enabled_cluster_log_types"] and \
conf["enabled_cluster_log_types"][0] is not None:
if type(conf["enabled_cluster_log_types"][0][0]) == str:
if all(elem in conf["enabled_cluster_log_types"][0] for elem in log_types):
return CheckResult.PASSED
elif type(conf["enabled_cluster_log_types"][0][0]) == list:
if all([elem] in conf["enabled_cluster_log_types"][0] for elem in log_types):
return CheckResult.PASSED
enabled_cluster_log_types = conf.get("enabled_cluster_log_types")
if enabled_cluster_log_types and enabled_cluster_log_types[0] is not None:
enabled_cluster_log_types = enabled_cluster_log_types[0]
if isinstance(enabled_cluster_log_types[0], str):
if all(elem in enabled_cluster_log_types for elem in log_types):
return CheckResult.PASSED
elif isinstance(enabled_cluster_log_types[0], list):
if all([elem] in enabled_cluster_log_types for elem in log_types):
return CheckResult.PASSED
return CheckResult.FAILED

def get_evaluated_keys(self) -> List[str]:
Expand Down
Loading