Class: CloudFormationAuthenticationRule
- Defined in:
- lib/cfn-nag/custom_rules/CloudFormationAuthenticationRule.rb
Overview
Rule to ensure credentials are not specified in template
Instance Method Summary collapse
Methods inherited from BaseRule
Instance Method Details
#audit_impl(cfn_model) ⇒ Object
19 20 21 22 23 24 25 26 27 28 |
# File 'lib/cfn-nag/custom_rules/CloudFormationAuthenticationRule.rb', line 19 def audit_impl(cfn_model) logical_resource_ids = [] cfn_model.raw_model['Resources'].each do |resource_name, resource| unless resource['Metadata'].nil? next if resource['Metadata']['AWS::CloudFormation::Authentication'].nil? logical_resource_ids << resource_name end end logical_resource_ids end |
#rule_id ⇒ Object
15 16 17 |
# File 'lib/cfn-nag/custom_rules/CloudFormationAuthenticationRule.rb', line 15 def rule_id 'W1' end |
#rule_text ⇒ Object
6 7 8 9 |
# File 'lib/cfn-nag/custom_rules/CloudFormationAuthenticationRule.rb', line 6 def rule_text 'Specifying credentials in the template itself ' \ 'is probably not the safest thing' end |