Class: DirectoryServiceMicrosoftADPasswordRule

Inherits:
PasswordBaseRule show all
Defined in:
lib/cfn-nag/custom_rules/DirectoryServiceMicrosoftADPasswordRule.rb

Overview

Rule class to fail on DirectoryService::MicrosoftAD password in template

Instance Method Summary collapse

Methods inherited from PasswordBaseRule

#audit_impl, #sub_property_name

Methods inherited from BaseRule

#audit, #audit_impl

Instance Method Details

#password_propertyObject


26
27
28
# File 'lib/cfn-nag/custom_rules/DirectoryServiceMicrosoftADPasswordRule.rb', line 26

def password_property
  :password
end

#resource_typeObject


22
23
24
# File 'lib/cfn-nag/custom_rules/DirectoryServiceMicrosoftADPasswordRule.rb', line 22

def resource_type
  'AWS::DirectoryService::MicrosoftAD'
end

#rule_idObject


18
19
20
# File 'lib/cfn-nag/custom_rules/DirectoryServiceMicrosoftADPasswordRule.rb', line 18

def rule_id
  'F36'
end

#rule_textObject


8
9
10
11
12
# File 'lib/cfn-nag/custom_rules/DirectoryServiceMicrosoftADPasswordRule.rb', line 8

def rule_text
  'Directory Service Microsoft AD password must not be a plaintext string ' \
  'or a Ref to a Parameter with a Default value.  ' \
  'Can be Ref to a NoEcho Parameter without a Default, or a dynamic reference to a secretsmanager/ssm-secure value.'
end

#rule_typeObject


14
15
16
# File 'lib/cfn-nag/custom_rules/DirectoryServiceMicrosoftADPasswordRule.rb', line 14

def rule_type
  Violation::FAILING_VIOLATION
end