fix(terraform): add new attached resource possibility to CKV2_AWS_23 #…

…5424 (#5429) add new attached resource possibility
bridgecrewio · Aug 13, 2023 · f4b0a3d · f4b0a3d
1 parent 65dbeb1
commit f4b0a3d
Show file tree

Hide file tree

Showing 3 changed files with 14 additions and 0 deletions.
diff --git a/checkov/terraform/checks/graph_checks/aws/Route53ARecordAttachedResource.yaml b/checkov/terraform/checks/graph_checks/aws/Route53ARecordAttachedResource.yaml
@@ -53,5 +53,6 @@ definition:
               - aws_db_instance
               - aws_apigatewayv2_domain_name
               - aws_lightsail_instance
+              - aws_lightsail_static_ip
            operator: exists
            attribute: networking
diff --git a/tests/terraform/graph/checks/resources/Route53ARecordAttachedResource/expected.yaml b/tests/terraform/graph/checks/resources/Route53ARecordAttachedResource/expected.yaml
@@ -7,6 +7,7 @@ pass:
   - "aws_route53_record.pass_apiv2"
   - "aws_route53_record.pass_alb"
   - "aws_route53_record.pass_lightsail"
+  - "aws_route53_record.pass_lightsail2"
 fail:
   - "aws_route53_record.fail"
 ignore:

diff --git a/tests/terraform/graph/checks/resources/Route53ARecordAttachedResource/main.tf b/tests/terraform/graph/checks/resources/Route53ARecordAttachedResource/main.tf
@@ -288,3 +288,15 @@ resource "aws_lightsail_instance" "example" {
   blueprint_id      = "ubuntu_20_04"
   bundle_id         = "medium_2_0"
 }
+
+resource "aws_route53_record" "pass_lightsail2" {
+  zone_id = aws_route53_zone.primary.zone_id
+  name = "mydomian.com"
+  type = "A"
+  ttl = "30"
+  records = [aws_lightsail_static_ip.example.ip_address]
+}
+
+resource "aws_lightsail_static_ip" "example" {
+  name = "pike"
+}