tests(terraform): add Terraform test for the CKV2_AWS_5 check

bridgecrewio · Aug 27, 2024 · 9de662c · 9de662c
1 parent 59e5077
commit 9de662c
Show file tree

Hide file tree

Showing 2 changed files with 26 additions and 0 deletions.
diff --git a/tests/terraform/graph/checks/resources/SGAttachedToResource/expected.yaml b/tests/terraform/graph/checks/resources/SGAttachedToResource/expected.yaml
@@ -9,6 +9,7 @@ pass:
   - "aws_security_group.pass_dax_cluster"
   - "aws_security_group.pass_dms"
   - "aws_security_group.pass_docdb"
+  - "aws_security_group.pass_docdbelastic"
   - "aws_security_group.pass_ec2"
   - "aws_security_group.pass_ec2_client_vpn"
   - "aws_security_group.pass_ec2_client_vpn_endpoint"

diff --git a/tests/terraform/graph/checks/resources/SGAttachedToResource/main.tf b/tests/terraform/graph/checks/resources/SGAttachedToResource/main.tf
@@ -157,6 +157,31 @@ resource "aws_docdb_cluster" "pass_docdb" {
   vpc_security_group_ids = [aws_security_group.pass_docdb.id]
 }
 
+# DocDB Elastic
+
+resource "aws_security_group" "pass_docdbelastic" {
+  ingress {
+    description = "TLS from VPC"
+    from_port   = 443
+    to_port     = 443
+    protocol    = "tcp"
+    cidr_blocks = ["0.0.0.0/0"]
+  }
+}
+
+resource "aws_docdbelastic_cluster" "pass_docdbelastic" {
+  name = "docdbelastic_cluster"
+
+  admin_user_name     = "admin"
+  admin_user_password = "4dm1np4ssw0rd"
+
+  auth_type      = "PLAIN_TEXT"
+  shard_capacity = 2
+  shard_count    = 1
+
+  vpc_security_group_ids = [aws_security_group.pass_docdbelastic.id]
+}
+
 # EC2
 
 resource "aws_security_group" "pass_ec2" {