Class: DirectoryServiceSimpleADPasswordRule

Inherits:
PasswordBaseRule show all
Defined in:
lib/cfn-nag/custom_rules/DirectoryServiceSimpleADPasswordRule.rb

Overview

Rule class to fail on DirectoryService::SimpleAD password in template

Instance Method Summary collapse

Methods inherited from PasswordBaseRule

#audit_impl, #sub_property_name

Methods inherited from BaseRule

#audit, #audit_impl, #violation

Instance Method Details

#password_propertyObject



26
27
28
# File 'lib/cfn-nag/custom_rules/DirectoryServiceSimpleADPasswordRule.rb', line 26

def password_property
  :password
end

#resource_typeObject



22
23
24
# File 'lib/cfn-nag/custom_rules/DirectoryServiceSimpleADPasswordRule.rb', line 22

def resource_type
  'AWS::DirectoryService::SimpleAD'
end

#rule_idObject



18
19
20
# File 'lib/cfn-nag/custom_rules/DirectoryServiceSimpleADPasswordRule.rb', line 18

def rule_id
  'F31'
end

#rule_textObject



8
9
10
11
12
# File 'lib/cfn-nag/custom_rules/DirectoryServiceSimpleADPasswordRule.rb', line 8

def rule_text
  'DirectoryService SimpleAD password must not be a plaintext string ' \
    'or a Ref to a Parameter with a Default value.  ' \
    'Can be Ref to a NoEcho Parameter without a Default, or a dynamic reference to a secretsmanager/ssm-secure value.'
end

#rule_typeObject



14
15
16
# File 'lib/cfn-nag/custom_rules/DirectoryServiceSimpleADPasswordRule.rb', line 14

def rule_type
  Violation::FAILING_VIOLATION
end