Update terraform-aws-modules/ec2-instance/aws requirement from v5.6.0 to 5.7.1 in /terraform/environments/data-platform-apps-and-tools #8202

dependabot · 2024-10-14T00:33:07Z

Updates the requirements on terraform-aws-modules/ec2-instance/aws to permit the latest version.

Release notes

Sourced from terraform-aws-modules/ec2-instance/aws's releases.

v5.7.1

5.7.1 (2024-10-11)

Bug Fixes

Update CI workflow versions to latest (#409) (e48d67f)

Changelog

Sourced from terraform-aws-modules/ec2-instance/aws's changelog.

5.7.1 (2024-10-11)

Bug Fixes

Update CI workflow versions to latest (#409) (e48d67f)

5.7.0 (2024-08-26)

Features

Added parameter to attach aws_eip (#391) (57cdd5d)

5.6.1 (2024-03-07)

Bug Fixes

Update CI workflow versions to remove deprecated runtime warnings (#379) (2c9e615)

5.6.0 (2023-12-25)

Features

Support Private DNS name options (#370) (d3520fd)

5.5.0 (2023-08-30)

Features

Add example for connecting via Session Manager without Internet access (#336) (68edef8)

5.4.0 (2023-08-30)

Features

Add availability_zone output (#347) (1b2cdeb)

5.3.1 (2023-08-17)

Bug Fixes

Fixed ami variable when using without ssm (#354) (a1691a0)

5.3.0 (2023-08-16)

... (truncated)

Commits

28b2c72 chore(release): version 5.7.1 [skip ci]
e48d67f fix: Update CI workflow versions to latest (#409)
29230f9 chore(release): version 5.7.0 [skip ci]
57cdd5d feat: Added parameter to attach aws_eip (#391)
4f8387d chore(release): version 5.6.1 [skip ci]
2c9e615 fix: Update CI workflow versions to remove deprecated runtime warnings (#379)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Updates the requirements on [terraform-aws-modules/ec2-instance/aws](https://github.com/terraform-aws-modules/terraform-aws-ec2-instance) to permit the latest version. - [Release notes](https://github.com/terraform-aws-modules/terraform-aws-ec2-instance/releases) - [Changelog](https://github.com/terraform-aws-modules/terraform-aws-ec2-instance/blob/master/CHANGELOG.md) - [Commits](terraform-aws-modules/terraform-aws-ec2-instance@v5.6.0...v5.7.1) --- updated-dependencies: - dependency-name: terraform-aws-modules/ec2-instance/aws dependency-type: direct:production ... Signed-off-by: dependabot[bot] <[email protected]>

github-actions · 2024-10-14T00:34:44Z

`Trivy Scan` Success

Show Output

```hcl

Trivy will check the following folders:
terraform/environments/data-platform-apps-and-tools

Running Trivy in terraform/environments/data-platform-apps-and-tools
2024-10-14T00:34:24Z INFO [vulndb] Need to update DB
2024-10-14T00:34:24Z INFO [vulndb] Downloading vulnerability DB...
2024-10-14T00:34:24Z INFO [vulndb] Downloading artifact... repo="ghcr.io/aquasecurity/trivy-db:2"
2024-10-14T00:34:26Z INFO [vulndb] Artifact successfully downloaded repo="ghcr.io/aquasecurity/trivy-db:2"
2024-10-14T00:34:26Z INFO [vuln] Vulnerability scanning is enabled
2024-10-14T00:34:26Z INFO [misconfig] Misconfiguration scanning is enabled
2024-10-14T00:34:26Z INFO [misconfig] Need to update the built-in checks
2024-10-14T00:34:26Z INFO [misconfig] Downloading the built-in checks...
156.02 KiB / 156.02 KiB [---------------------------------------------------------] 100.00% ? p/s 0s2024-10-14T00:34:26Z INFO [secret] Secret scanning is enabled
2024-10-14T00:34:26Z INFO [secret] If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2024-10-14T00:34:26Z INFO [secret] Please see also https://aquasecurity.github.io/trivy/v0.56/docs/scanner/secret#recommendation for faster secret detection
2024-10-14T00:34:26Z WARN [pip] Unable to find python site-packages directory. License detection is skipped. err="site-packages directory not found"
2024-10-14T00:34:28Z INFO [terraform scanner] Scanning root module file_path="."
2024-10-14T00:34:28Z WARN [terraform parser] Variable values was not found in the environment or variable files. Evaluating may not work correctly. module="root" variables="networking"
2024-10-14T00:34:28Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="data.aws_subnet.private" value="cty.NilVal"
2024-10-14T00:34:28Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.auth0_log_streams" value="cty.NilVal"
2024-10-14T00:34:34Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.airflow_s3_bucket.dynamic.expiration" value="cty.NilVal"
2024-10-14T00:34:34Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.airflow_s3_bucket.dynamic.transition" value="cty.NilVal"
2024-10-14T00:34:34Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.airflow_s3_bucket.dynamic.noncurrent_version_expiration" value="cty.NilVal"
2024-10-14T00:34:34Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.airflow_s3_bucket.dynamic.noncurrent_version_transition" value="cty.NilVal"
2024-10-14T00:34:34Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.airflow_s3_bucket.dynamic.principals" value="cty.NilVal"
2024-10-14T00:34:34Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.airflow_s3_bucket.dynamic.condition" value="cty.NilVal"
2024-10-14T00:34:34Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.airflow_s3_bucket.dynamic.expiration" value="cty.NilVal"
2024-10-14T00:34:34Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.airflow_s3_bucket.dynamic.transition" value="cty.NilVal"
2024-10-14T00:34:34Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.airflow_s3_bucket.dynamic.noncurrent_version_expiration" value="cty.NilVal"
2024-10-14T00:34:34Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.airflow_s3_bucket.dynamic.noncurrent_version_transition" value="cty.NilVal"
2024-10-14T00:34:34Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.airflow_s3_bucket.dynamic.principals" value="cty.NilVal"
2024-10-14T00:34:34Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.airflow_s3_bucket.dynamic.condition" value="cty.NilVal"
2024-10-14T00:34:35Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.cluster_autoscaler_role.dynamic.statement" value="cty.NilVal"
2024-10-14T00:34:35Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.cluster_autoscaler_role.dynamic.statement" value="cty.NilVal"
2024-10-14T00:34:35Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.datahub_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:35Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.datahub_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:35Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.datahub_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:35Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.datahub_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:35Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.datahub_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:35Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.datahub_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:35Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.datahub_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:35Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.datahub_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:35Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.datahub_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:35Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.datahub_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:35Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.datahub_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:35Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.datahub_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:35Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.datahub_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:35Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.datahub_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:35Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.datahub_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:35Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.datahub_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:35Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.datahub_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:35Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.datahub_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:35Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.datahub_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:35Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.datahub_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:35Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.datahub_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:35Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.datahub_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:35Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.datahub_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:35Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.datahub_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:35Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.datahub_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:35Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.datahub_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:35Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.datahub_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:35Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.datahub_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:35Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.eks.aws_ec2_tag.cluster_primary_security_group" value="cty.NilVal"
2024-10-14T00:34:35Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.eks.module.kms.dynamic.statement" value="cty.NilVal"
2024-10-14T00:34:35Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.eks.module.kms.dynamic.statement" value="cty.NilVal"
2024-10-14T00:34:35Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.eks.module.kms.dynamic.statement" value="cty.NilVal"
2024-10-14T00:34:35Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.eks.module.kms.dynamic.statement" value="cty.NilVal"
2024-10-14T00:34:35Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.eks.module.kms.dynamic.statement" value="cty.NilVal"
2024-10-14T00:34:35Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.eks.module.kms.dynamic.statement" value="cty.NilVal"
2024-10-14T00:34:35Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.eks.module.eks_managed_node_group["general"].aws_iam_role_policy_attachment.this" value="cty.NilVal"
2024-10-14T00:34:35Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.cluster_autoscaler_role.dynamic.statement" value="cty.NilVal"
2024-10-14T00:34:35Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.cluster_autoscaler_role.dynamic.statement" value="cty.NilVal"
2024-10-14T00:34:35Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.openmetadata_airflow_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:35Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.openmetadata_airflow_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:35Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.openmetadata_airflow_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:35Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.openmetadata_airflow_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:35Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.openmetadata_airflow_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:35Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.openmetadata_airflow_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:35Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.openmetadata_airflow_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:35Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.openmetadata_airflow_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:37Z INFO [terraform executor] Ignore finding rule="aws-s3-encryption-customer-key" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=v7.1.0/main.tf:171-179"
2024-10-14T00:34:37Z INFO [terraform executor] Ignore finding rule="aws-eks-no-public-cluster-access" range="git::https:/github.com/terraform-aws-modules/terraform-aws-eks?ref=2cb1fac31b0fc2dd6a236b0c0678df75819c5a3b/main.tf:37"
2024-10-14T00:34:37Z INFO [terraform executor] Ignore finding rule="aws-eks-no-public-cluster-access-to-cidr" range="git::https:/github.com/terraform-aws-modules/terraform-aws-eks?ref=2cb1fac31b0fc2dd6a236b0c0678df75819c5a3b/main.tf:38"
2024-10-14T00:34:37Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-egress-sgr" range="git::https:/github.com/terraform-aws-modules/terraform-aws-eks?ref=2cb1fac31b0fc2dd6a236b0c0678df75819c5a3b/node_groups.tf:223"
2024-10-14T00:34:37Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-egress-sgr" range="terraform-aws-modules/security-group/aws/main.tf:533"
2024-10-14T00:34:37Z INFO [terraform executor] Ignore finding rule="aws-ec2-no-public-egress-sgr" range="terraform-aws-modules/security-group/aws/main.tf:534"
2024-10-14T00:34:38Z INFO Number of language-specific files num=1
2024-10-14T00:34:38Z INFO [pip] Detecting vulnerabilities...
2024-10-14T00:34:38Z INFO Detected config files num=12
trivy_exitcode=0

</details> #### `Checkov Scan` Failed
<details><summary>Show Output</summary>

```hcl

*****************************

Checkov will check the following folders:
terraform/environments/data-platform-apps-and-tools

*****************************

Running Checkov in terraform/environments/data-platform-apps-and-tools
Excluding the following checks: CKV_GIT_1,CKV_AWS_126,CKV2_AWS_38,CKV2_AWS_39
2024-10-14 00:34:40,690 [MainThread  ] [WARNI]  Failed to download module terraform-aws-modules/kms/aws:~> 2.0 (for external modules, the --download-external-modules flag is required)
2024-10-14 00:34:40,690 [MainThread  ] [WARNI]  Failed to download module terraform-aws-modules/iam/aws//modules/iam-role-for-service-accounts-eks:~> 5.0 (for external modules, the --download-external-modules flag is required)
2024-10-14 00:34:40,690 [MainThread  ] [WARNI]  Failed to download module terraform-aws-modules/cloudwatch/aws//modules/log-group:~> 5.0 (for external modules, the --download-external-modules flag is required)
2024-10-14 00:34:40,690 [MainThread  ] [WARNI]  Failed to download module terraform-aws-modules/ec2-instance/aws:5.7.1 (for external modules, the --download-external-modules flag is required)
2024-10-14 00:34:40,691 [MainThread  ] [WARNI]  Failed to download module terraform-aws-modules/rds/aws:~> 6.0 (for external modules, the --download-external-modules flag is required)
2024-10-14 00:34:40,691 [MainThread  ] [WARNI]  Failed to download module terraform-aws-modules/iam/aws//modules/iam-policy:~> 5.0 (for external modules, the --download-external-modules flag is required)
2024-10-14 00:34:40,691 [MainThread  ] [WARNI]  Failed to download module terraform-aws-modules/iam/aws//modules/iam-user:~> 5 (for external modules, the --download-external-modules flag is required)
2024-10-14 00:34:40,691 [MainThread  ] [WARNI]  Failed to download module github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=v7.1.0:None (for external modules, the --download-external-modules flag is required)
2024-10-14 00:34:40,691 [MainThread  ] [WARNI]  Failed to download module terraform-aws-modules/iam/aws//modules/iam-assumable-role:~> 5.0 (for external modules, the --download-external-modules flag is required)
2024-10-14 00:34:40,691 [MainThread  ] [WARNI]  Failed to download module terraform-aws-modules/efs/aws:~> 1.0 (for external modules, the --download-external-modules flag is required)
2024-10-14 00:34:40,691 [MainThread  ] [WARNI]  Failed to download module ministryofjustice/observability-platform-tenant/aws:1.0.1 (for external modules, the --download-external-modules flag is required)
2024-10-14 00:34:40,692 [MainThread  ] [WARNI]  Failed to download module terraform-aws-modules/vpc/aws//modules/vpc-endpoints:~> 5.0 (for external modules, the --download-external-modules flag is required)
2024-10-14 00:34:40,692 [MainThread  ] [WARNI]  Failed to download module terraform-aws-modules/security-group/aws:~> 5.0 (for external modules, the --download-external-modules flag is required)
2024-10-14 00:34:40,692 [MainThread  ] [WARNI]  Failed to download module terraform-aws-modules/eks/aws:19.21.0 (for external modules, the --download-external-modules flag is required)
2024-10-14 00:34:40,692 [MainThread  ] [WARNI]  Failed to download module terraform-aws-modules/lambda/aws:~> 6.0 (for external modules, the --download-external-modules flag is required)
2024-10-14 00:34:40,692 [MainThread  ] [WARNI]  Failed to download module terraform-aws-modules/vpc/aws:~> 5.0 (for external modules, the --download-external-modules flag is required)
2024-10-14 00:34:40,692 [MainThread  ] [WARNI]  Failed to download module terraform-aws-modules/kms/aws:2.2.0 (for external modules, the --download-external-modules flag is required)
2024-10-14 00:34:41,121 [MainThread  ] [WARNI]  Fail to load yaml content, while scanning for the next token
found character '@' that cannot start any token
  in "<unicode string>", line 19, column 48:
     ... : {{ .Values.image.repository }}@sha256:{{ .Values.image.sha }}
                                         ^
terraform scan results:

Passed checks: 169, Failed checks: 20, Skipped checks: 43

Check: CKV_AWS_149: "Ensure that Secrets Manager secret is encrypted using KMS CMK"
	FAILED for resource: aws_secretsmanager_secret.powerbi_gateway_reg_credentials
	File: /powerbi-gateway-secret.tf:1-3
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/ensure-that-secrets-manager-secret-is-encrypted-using-kms

		1 | resource "aws_secretsmanager_secret" "powerbi_gateway_reg_credentials" {
		2 |   name = "${local.environment_configuration.powerbi_gateway_ec2.instance_name}-credentials"
		3 | }

Check: CKV_AWS_23: "Ensure every security group and rule has a description"
	FAILED for resource: aws_security_group.powerbi_gateway
	File: /powerbi-gateway-security-group.tf:2-30
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-networking-policies/networking-31

		2  | resource "aws_security_group" "powerbi_gateway" {
		3  |   name        = local.environment_configuration.powerbi_gateway_ec2.instance_name
		4  |   description = local.environment_configuration.powerbi_gateway_ec2.instance_name
		5  |   vpc_id      = data.aws_vpc.shared.id
		6  | 
		7  |   # https://learn.microsoft.com/en-us/data-integration/gateway/service-gateway-communication#ports
		8  |   egress {
		9  |     from_port   = 443
		10 |     to_port     = 443
		11 |     protocol    = "tcp"
		12 |     cidr_blocks = ["0.0.0.0/0"]
		13 |   }
		14 | 
		15 |   egress {
		16 |     from_port   = 5671
		17 |     to_port     = 5672
		18 |     protocol    = "tcp"
		19 |     cidr_blocks = ["0.0.0.0/0"]
		20 |   }
		21 | 
		22 |   egress {
		23 |     from_port   = 9352
		24 |     to_port     = 9354
		25 |     protocol    = "tcp"
		26 |     cidr_blocks = ["0.0.0.0/0"]
		27 |   }
		28 | 
		29 |   tags = local.tags
		30 | }

Check: CKV_TF_1: "Ensure Terraform module sources use a commit hash"
	FAILED for resource: powerbi_gateway
	File: /powerbi-gateway-server.tf:14-59
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/supply-chain-policies/terraform-policies/ensure-terraform-module-sources-use-git-url-with-commit-hash-revision

		14 | module "powerbi_gateway" {
		15 |   source  = "terraform-aws-modules/ec2-instance/aws"
		16 |   version = "5.7.1"
		17 | 
		18 |   name = local.environment_configuration.powerbi_gateway_ec2.instance_name
		19 |   # ami                         = data.aws_ami.windows_server_2022.id
		20 |   ami                         = "ami-00ffeb610527f540b" # Hardcoded AMI ID for Windows Server 2022
		21 |   instance_type               = local.environment_configuration.powerbi_gateway_ec2.instance_type
		22 |   key_name                    = aws_key_pair.powerbi_gateway_keypair.key_name
		23 |   monitoring                  = true
		24 |   create_iam_instance_profile = true
		25 |   iam_role_description        = "IAM role for PowerBI Gateway Instance"
		26 |   ignore_ami_changes          = false
		27 |   enable_volume_tags          = false
		28 |   associate_public_ip_address = false
		29 |   iam_role_policies = {
		30 |     SSMCore            = "arn:aws:iam::aws:policy/AmazonSSMManagedInstanceCore"
		31 |     PowerBI_DataAccess = aws_iam_policy.powerbi_gateway_data_access.arn
		32 |   }
		33 |   root_block_device = [
		34 |     {
		35 |       encrypted   = true
		36 |       volume_type = "gp3"
		37 |       volume_size = 100
		38 |       tags = merge({
		39 |         Name = "${local.environment_configuration.powerbi_gateway_ec2.instance_name}-root-volume"
		40 |       }, local.tags)
		41 |     },
		42 |   ]
		43 | 
		44 |   ebs_block_device = [
		45 |     {
		46 |       volume_type = "gp3"
		47 |       device_name = "/dev/sdf"
		48 |       volume_size = 300
		49 |       encrypted   = true
		50 |       tags = merge({
		51 |         Name = "${local.environment_configuration.powerbi_gateway_ec2.instance_name}-data-volume"
		52 |       }, local.tags)
		53 |     }
		54 |   ]
		55 |   vpc_security_group_ids = [aws_security_group.powerbi_gateway.id]
		56 |   subnet_id              = data.aws_subnet.private_subnets_a.id
		57 | 
		58 |   tags = local.tags
		59 | }

Check: CKV_TF_1: "Ensure Terraform module sources use a commit hash"
	FAILED for resource: airflow_s3_bucket
	File: /s3.tf:5-15
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/supply-chain-policies/terraform-policies/ensure-terraform-module-sources-use-git-url-with-commit-hash-revision

		5  | module "airflow_s3_bucket" {
		6  |   source = "github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=v7.1.0"
		7  | 
		8  |   providers = {
		9  |     aws.bucket-replication = aws
		10 |   }
		11 | 
		12 |   bucket_prefix = "moj-data-platform-airflow-${local.environment}"
		13 | 
		14 |   tags = local.tags
		15 | }

Check: CKV_AWS_149: "Ensure that Secrets Manager secret is encrypted using KMS CMK"
	FAILED for resource: aws_secretsmanager_secret.openmetadata_entra_id_client_id
	File: /secrets.tf:7-11
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/ensure-that-secrets-manager-secret-is-encrypted-using-kms

		7  | resource "aws_secretsmanager_secret" "openmetadata_entra_id_client_id" {
		8  |   count = terraform.workspace == "data-platform-apps-and-tools-production" ? 1 : 0
		9  | 
		10 |   name = "openmetadata/entra-id/client-id"
		11 | }

Check: CKV_AWS_149: "Ensure that Secrets Manager secret is encrypted using KMS CMK"
	FAILED for resource: aws_secretsmanager_secret.openmetadata_entra_id_tenant_id
	File: /secrets.tf:13-17
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/ensure-that-secrets-manager-secret-is-encrypted-using-kms

		13 | resource "aws_secretsmanager_secret" "openmetadata_entra_id_tenant_id" {
		14 |   count = terraform.workspace == "data-platform-apps-and-tools-production" ? 1 : 0
		15 | 
		16 |   name = "openmetadata/entra-id/tenant-id"
		17 | }

Check: CKV_AWS_149: "Ensure that Secrets Manager secret is encrypted using KMS CMK"
	FAILED for resource: aws_secretsmanager_secret.github_app_arc_app_id
	File: /secrets.tf:19-23
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/ensure-that-secrets-manager-secret-is-encrypted-using-kms

		19 | resource "aws_secretsmanager_secret" "github_app_arc_app_id" {
		20 |   count = terraform.workspace == "data-platform-apps-and-tools-production" ? 1 : 0
		21 | 
		22 |   name = "github/arc/app-id"
		23 | }

Check: CKV_AWS_149: "Ensure that Secrets Manager secret is encrypted using KMS CMK"
	FAILED for resource: aws_secretsmanager_secret.github_app_arc_install_id
	File: /secrets.tf:25-29
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/ensure-that-secrets-manager-secret-is-encrypted-using-kms

		25 | resource "aws_secretsmanager_secret" "github_app_arc_install_id" {
		26 |   count = terraform.workspace == "data-platform-apps-and-tools-production" ? 1 : 0
		27 | 
		28 |   name = "github/arc/install-id"
		29 | }

Check: CKV_AWS_149: "Ensure that Secrets Manager secret is encrypted using KMS CMK"
	FAILED for resource: aws_secretsmanager_secret.github_app_arc_private_key
	File: /secrets.tf:31-35
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/ensure-that-secrets-manager-secret-is-encrypted-using-kms

		31 | resource "aws_secretsmanager_secret" "github_app_arc_private_key" {
		32 |   count = terraform.workspace == "data-platform-apps-and-tools-production" ? 1 : 0
		33 | 
		34 |   name = "github/arc/private-key"
		35 | }

Check: CKV_AWS_149: "Ensure that Secrets Manager secret is encrypted using KMS CMK"
	FAILED for resource: aws_secretsmanager_secret.govuk_notify_api_key
	File: /secrets.tf:38-42
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/ensure-that-secrets-manager-secret-is-encrypted-using-kms

		38 | resource "aws_secretsmanager_secret" "govuk_notify_api_key" {
		39 |   count = terraform.workspace == "data-platform-apps-and-tools-production" ? 1 : 0
		40 | 
		41 |   name = "gov-uk-notify/production/api-key"
		42 | }

Check: CKV_AWS_149: "Ensure that Secrets Manager secret is encrypted using KMS CMK"
	FAILED for resource: aws_secretsmanager_secret.jml_email
	File: /secrets.tf:45-49
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/ensure-that-secrets-manager-secret-is-encrypted-using-kms

		45 | resource "aws_secretsmanager_secret" "jml_email" {
		46 |   count = terraform.workspace == "data-platform-apps-and-tools-production" ? 1 : 0
		47 | 
		48 |   name = "jml/email"
		49 | }

Check: CKV2_AWS_5: "Ensure that Security Groups are attached to another resource"
	FAILED for resource: aws_security_group.powerbi_gateway
	File: /powerbi-gateway-security-group.tf:2-30
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-networking-policies/ensure-that-security-groups-are-attached-to-ec2-instances-or-elastic-network-interfaces-enis

		2  | resource "aws_security_group" "powerbi_gateway" {
		3  |   name        = local.environment_configuration.powerbi_gateway_ec2.instance_name
		4  |   description = local.environment_configuration.powerbi_gateway_ec2.instance_name
		5  |   vpc_id      = data.aws_vpc.shared.id
		6  | 
		7  |   # https://learn.microsoft.com/en-us/data-integration/gateway/service-gateway-communication#ports
		8  |   egress {
		9  |     from_port   = 443
		10 |     to_port     = 443
		11 |     protocol    = "tcp"
		12 |     cidr_blocks = ["0.0.0.0/0"]
		13 |   }
		14 | 
		15 |   egress {
		16 |     from_port   = 5671
		17 |     to_port     = 5672
		18 |     protocol    = "tcp"
		19 |     cidr_blocks = ["0.0.0.0/0"]
		20 |   }
		21 | 
		22 |   egress {
		23 |     from_port   = 9352
		24 |     to_port     = 9354
		25 |     protocol    = "tcp"
		26 |     cidr_blocks = ["0.0.0.0/0"]
		27 |   }
		28 | 
		29 |   tags = local.tags
		30 | }

Check: CKV2_AWS_57: "Ensure Secrets Manager secrets should have automatic rotation enabled"
	FAILED for resource: aws_secretsmanager_secret.powerbi_gateway_reg_credentials
	File: /powerbi-gateway-secret.tf:1-3
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/bc-aws-2-57

		1 | resource "aws_secretsmanager_secret" "powerbi_gateway_reg_credentials" {
		2 |   name = "${local.environment_configuration.powerbi_gateway_ec2.instance_name}-credentials"
		3 | }

Check: CKV2_AWS_57: "Ensure Secrets Manager secrets should have automatic rotation enabled"
	FAILED for resource: aws_secretsmanager_secret.openmetadata_entra_id_client_id
	File: /secrets.tf:7-11
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/bc-aws-2-57

		7  | resource "aws_secretsmanager_secret" "openmetadata_entra_id_client_id" {
		8  |   count = terraform.workspace == "data-platform-apps-and-tools-production" ? 1 : 0
		9  | 
		10 |   name = "openmetadata/entra-id/client-id"
		11 | }

Check: CKV2_AWS_57: "Ensure Secrets Manager secrets should have automatic rotation enabled"
	FAILED for resource: aws_secretsmanager_secret.openmetadata_entra_id_tenant_id
	File: /secrets.tf:13-17
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/bc-aws-2-57

		13 | resource "aws_secretsmanager_secret" "openmetadata_entra_id_tenant_id" {
		14 |   count = terraform.workspace == "data-platform-apps-and-tools-production" ? 1 : 0
		15 | 
		16 |   name = "openmetadata/entra-id/tenant-id"
		17 | }

Check: CKV2_AWS_57: "Ensure Secrets Manager secrets should have automatic rotation enabled"
	FAILED for resource: aws_secretsmanager_secret.github_app_arc_app_id
	File: /secrets.tf:19-23
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/bc-aws-2-57

		19 | resource "aws_secretsmanager_secret" "github_app_arc_app_id" {
		20 |   count = terraform.workspace == "data-platform-apps-and-tools-production" ? 1 : 0
		21 | 
		22 |   name = "github/arc/app-id"
		23 | }

Check: CKV2_AWS_57: "Ensure Secrets Manager secrets should have automatic rotation enabled"
	FAILED for resource: aws_secretsmanager_secret.github_app_arc_install_id
	File: /secrets.tf:25-29
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/bc-aws-2-57

		25 | resource "aws_secretsmanager_secret" "github_app_arc_install_id" {
		26 |   count = terraform.workspace == "data-platform-apps-and-tools-production" ? 1 : 0
		27 | 
		28 |   name = "github/arc/install-id"
		29 | }

Check: CKV2_AWS_57: "Ensure Secrets Manager secrets should have automatic rotation enabled"
	FAILED for resource: aws_secretsmanager_secret.github_app_arc_private_key
	File: /secrets.tf:31-35
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/bc-aws-2-57

		31 | resource "aws_secretsmanager_secret" "github_app_arc_private_key" {
		32 |   count = terraform.workspace == "data-platform-apps-and-tools-production" ? 1 : 0
		33 | 
		34 |   name = "github/arc/private-key"
		35 | }

Check: CKV2_AWS_57: "Ensure Secrets Manager secrets should have automatic rotation enabled"
	FAILED for resource: aws_secretsmanager_secret.govuk_notify_api_key
	File: /secrets.tf:38-42
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/bc-aws-2-57

		38 | resource "aws_secretsmanager_secret" "govuk_notify_api_key" {
		39 |   count = terraform.workspace == "data-platform-apps-and-tools-production" ? 1 : 0
		40 | 
		41 |   name = "gov-uk-notify/production/api-key"
		42 | }

Check: CKV2_AWS_57: "Ensure Secrets Manager secrets should have automatic rotation enabled"
	FAILED for resource: aws_secretsmanager_secret.jml_email
	File: /secrets.tf:45-49
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/bc-aws-2-57

		45 | resource "aws_secretsmanager_secret" "jml_email" {
		46 |   count = terraform.workspace == "data-platform-apps-and-tools-production" ? 1 : 0
		47 | 
		48 |   name = "jml/email"
		49 | }


checkov_exitcode=1

`CTFLint Scan` Failed

Show Output

*****************************

Setting default tflint config...
Running tflint --init...
Installing "terraform" plugin...
Installed "terraform" (source: github.com/terraform-linters/tflint-ruleset-terraform, version: 0.9.1)
tflint will check the following folders:
terraform/environments/data-platform-apps-and-tools

*****************************

Running tflint in terraform/environments/data-platform-apps-and-tools
Excluding the following checks: terraform_unused_declarations
4 issue(s) found:

Warning: Duplicate key: "airflow_execution_role_name", first defined at terraform/environments/data-platform-apps-and-tools/environment-configuration.tf:31,7-34 (terraform_map_duplicate_keys)

  on terraform/environments/data-platform-apps-and-tools/environment-configuration.tf line 35:
  35:       airflow_execution_role_name   = "${local.application_name}-${local.environment}-airflow-execution"

Reference: https://github.com/terraform-linters/tflint-ruleset-terraform/blob/v0.9.1/docs/rules/terraform_map_duplicate_keys.md

Warning: Duplicate key: "eks_cluster_name", first defined at terraform/environments/data-platform-apps-and-tools/environment-configuration.tf:17,7-23 (terraform_map_duplicate_keys)

  on terraform/environments/data-platform-apps-and-tools/environment-configuration.tf line 68:
  68:       eks_cluster_name               = "apps-tools-development"

Reference: https://github.com/terraform-linters/tflint-ruleset-terraform/blob/v0.9.1/docs/rules/terraform_map_duplicate_keys.md

Warning: Duplicate key: "eks_cluster_name", first defined at terraform/environments/data-platform-apps-and-tools/environment-configuration.tf:105,7-23 (terraform_map_duplicate_keys)

  on terraform/environments/data-platform-apps-and-tools/environment-configuration.tf line 169:
 169:       eks_cluster_name               = "apps-tools-production"

Reference: https://github.com/terraform-linters/tflint-ruleset-terraform/blob/v0.9.1/docs/rules/terraform_map_duplicate_keys.md

Warning: Missing version constraint for provider "random" in `required_providers` (terraform_required_providers)

  on terraform/environments/data-platform-apps-and-tools/random.tf line 24:
  24: resource "random_password" "datahub_rds" {

Reference: https://github.com/terraform-linters/tflint-ruleset-terraform/blob/v0.9.1/docs/rules/terraform_required_providers.md

tflint_exitcode=2

`Trivy Scan` Success

Show Output

*****************************

Trivy will check the following folders:
terraform/environments/data-platform-apps-and-tools

*****************************

Running Trivy in terraform/environments/data-platform-apps-and-tools
2024-10-14T00:34:24Z	INFO	[vulndb] Need to update DB
2024-10-14T00:34:24Z	INFO	[vulndb] Downloading vulnerability DB...
2024-10-14T00:34:24Z	INFO	[vulndb] Downloading artifact...	repo="ghcr.io/aquasecurity/trivy-db:2"
2024-10-14T00:34:26Z	INFO	[vulndb] Artifact successfully downloaded	repo="ghcr.io/aquasecurity/trivy-db:2"
2024-10-14T00:34:26Z	INFO	[vuln] Vulnerability scanning is enabled
2024-10-14T00:34:26Z	INFO	[misconfig] Misconfiguration scanning is enabled
2024-10-14T00:34:26Z	INFO	[misconfig] Need to update the built-in checks
2024-10-14T00:34:26Z	INFO	[misconfig] Downloading the built-in checks...
156.02 KiB / 156.02 KiB [---------------------------------------------------------] 100.00% ? p/s 0s2024-10-14T00:34:26Z	INFO	[secret] Secret scanning is enabled
2024-10-14T00:34:26Z	INFO	[secret] If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2024-10-14T00:34:26Z	INFO	[secret] Please see also https://aquasecurity.github.io/trivy/v0.56/docs/scanner/secret#recommendation for faster secret detection
2024-10-14T00:34:26Z	WARN	[pip] Unable to find python `site-packages` directory. License detection is skipped.	err="site-packages directory not found"
2024-10-14T00:34:28Z	INFO	[terraform scanner] Scanning root module	file_path="."
2024-10-14T00:34:28Z	WARN	[terraform parser] Variable values was not found in the environment or variable files. Evaluating may not work correctly.	module="root" variables="networking"
2024-10-14T00:34:28Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="data.aws_subnet.private" value="cty.NilVal"
2024-10-14T00:34:28Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.auth0_log_streams" value="cty.NilVal"
2024-10-14T00:34:34Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.airflow_s3_bucket.dynamic.expiration" value="cty.NilVal"
2024-10-14T00:34:34Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.airflow_s3_bucket.dynamic.transition" value="cty.NilVal"
2024-10-14T00:34:34Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.airflow_s3_bucket.dynamic.noncurrent_version_expiration" value="cty.NilVal"
2024-10-14T00:34:34Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.airflow_s3_bucket.dynamic.noncurrent_version_transition" value="cty.NilVal"
2024-10-14T00:34:34Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.airflow_s3_bucket.dynamic.principals" value="cty.NilVal"
2024-10-14T00:34:34Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.airflow_s3_bucket.dynamic.condition" value="cty.NilVal"
2024-10-14T00:34:34Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.airflow_s3_bucket.dynamic.expiration" value="cty.NilVal"
2024-10-14T00:34:34Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.airflow_s3_bucket.dynamic.transition" value="cty.NilVal"
2024-10-14T00:34:34Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.airflow_s3_bucket.dynamic.noncurrent_version_expiration" value="cty.NilVal"
2024-10-14T00:34:34Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.airflow_s3_bucket.dynamic.noncurrent_version_transition" value="cty.NilVal"
2024-10-14T00:34:34Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.airflow_s3_bucket.dynamic.principals" value="cty.NilVal"
2024-10-14T00:34:34Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.airflow_s3_bucket.dynamic.condition" value="cty.NilVal"
2024-10-14T00:34:35Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.cluster_autoscaler_role.dynamic.statement" value="cty.NilVal"
2024-10-14T00:34:35Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.cluster_autoscaler_role.dynamic.statement" value="cty.NilVal"
2024-10-14T00:34:35Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.datahub_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:35Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.datahub_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:35Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.datahub_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:35Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.datahub_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:35Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.datahub_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:35Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.datahub_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:35Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.datahub_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:35Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.datahub_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:35Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.datahub_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:35Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.datahub_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:35Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.datahub_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:35Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.datahub_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:35Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.datahub_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:35Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.datahub_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:35Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.datahub_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:35Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.datahub_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:35Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.datahub_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:35Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.datahub_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:35Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.datahub_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:35Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.datahub_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:35Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.datahub_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:35Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.datahub_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:35Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.datahub_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:35Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.datahub_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:35Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.datahub_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:35Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.datahub_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:35Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.datahub_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:35Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.datahub_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:35Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.eks.aws_ec2_tag.cluster_primary_security_group" value="cty.NilVal"
2024-10-14T00:34:35Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.eks.module.kms.dynamic.statement" value="cty.NilVal"
2024-10-14T00:34:35Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.eks.module.kms.dynamic.statement" value="cty.NilVal"
2024-10-14T00:34:35Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.eks.module.kms.dynamic.statement" value="cty.NilVal"
2024-10-14T00:34:35Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.eks.module.kms.dynamic.statement" value="cty.NilVal"
2024-10-14T00:34:35Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.eks.module.kms.dynamic.statement" value="cty.NilVal"
2024-10-14T00:34:35Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.eks.module.kms.dynamic.statement" value="cty.NilVal"
2024-10-14T00:34:35Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.eks.module.eks_managed_node_group[\"general\"].aws_iam_role_policy_attachment.this" value="cty.NilVal"
2024-10-14T00:34:35Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.cluster_autoscaler_role.dynamic.statement" value="cty.NilVal"
2024-10-14T00:34:35Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.cluster_autoscaler_role.dynamic.statement" value="cty.NilVal"
2024-10-14T00:34:35Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.openmetadata_airflow_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:35Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.openmetadata_airflow_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:35Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.openmetadata_airflow_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:35Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.openmetadata_airflow_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:35Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.openmetadata_airflow_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:35Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.openmetadata_airflow_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:35Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.openmetadata_airflow_rds.module.db_instance.dynamic.restore_to_point_in_time" value="cty.NilVal"
2024-10-14T00:34:35Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.openmetadata_airflow_rds.module.db_instance.dynamic.s3_import" value="cty.NilVal"
2024-10-14T00:34:37Z	INFO	[terraform executor] Ignore finding	rule="aws-s3-encryption-customer-key" range="github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=v7.1.0/main.tf:171-179"
2024-10-14T00:34:37Z	INFO	[terraform executor] Ignore finding	rule="aws-eks-no-public-cluster-access" range="git::https:/github.com/terraform-aws-modules/terraform-aws-eks?ref=2cb1fac31b0fc2dd6a236b0c0678df75819c5a3b/main.tf:37"
2024-10-14T00:34:37Z	INFO	[terraform executor] Ignore finding	rule="aws-eks-no-public-cluster-access-to-cidr" range="git::https:/github.com/terraform-aws-modules/terraform-aws-eks?ref=2cb1fac31b0fc2dd6a236b0c0678df75819c5a3b/main.tf:38"
2024-10-14T00:34:37Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-egress-sgr" range="git::https:/github.com/terraform-aws-modules/terraform-aws-eks?ref=2cb1fac31b0fc2dd6a236b0c0678df75819c5a3b/node_groups.tf:223"
2024-10-14T00:34:37Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-egress-sgr" range="terraform-aws-modules/security-group/aws/main.tf:533"
2024-10-14T00:34:37Z	INFO	[terraform executor] Ignore finding	rule="aws-ec2-no-public-egress-sgr" range="terraform-aws-modules/security-group/aws/main.tf:534"
2024-10-14T00:34:38Z	INFO	Number of language-specific files	num=1
2024-10-14T00:34:38Z	INFO	[pip] Detecting vulnerabilities...
2024-10-14T00:34:38Z	INFO	Detected config files	num=12
trivy_exitcode=0

dependabot bot requested a review from a team as a code owner October 14, 2024 00:33

dependabot bot added dependencies Pull requests that update a dependency file terraform Pull requests that update Terraform code labels Oct 14, 2024

github-actions bot added the environments-repository Used to exclude PRs from this repo in our Slack PR update label Oct 14, 2024

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Update terraform-aws-modules/ec2-instance/aws requirement from v5.6.0 to 5.7.1 in /terraform/environments/data-platform-apps-and-tools #8202

Update terraform-aws-modules/ec2-instance/aws requirement from v5.6.0 to 5.7.1 in /terraform/environments/data-platform-apps-and-tools #8202

dependabot bot commented on behalf of github Oct 14, 2024

github-actions bot commented Oct 14, 2024

Update terraform-aws-modules/ec2-instance/aws requirement from v5.6.0 to 5.7.1 in /terraform/environments/data-platform-apps-and-tools #8202

Are you sure you want to change the base?

Update terraform-aws-modules/ec2-instance/aws requirement from v5.6.0 to 5.7.1 in /terraform/environments/data-platform-apps-and-tools #8202

Conversation

dependabot bot commented on behalf of github Oct 14, 2024

v5.7.1

5.7.1 (2024-10-11)

Bug Fixes

5.7.1 (2024-10-11)

Bug Fixes

5.7.0 (2024-08-26)

Features

5.6.1 (2024-03-07)

Bug Fixes

5.6.0 (2023-12-25)

Features

5.5.0 (2023-08-30)

Features

5.4.0 (2023-08-30)

Features

5.3.1 (2023-08-17)

Bug Fixes

5.3.0 (2023-08-16)

github-actions bot commented Oct 14, 2024

Trivy Scan Success

CTFLint Scan Failed

Trivy Scan Success

`Trivy Scan` Success

`CTFLint Scan` Failed

`Trivy Scan` Success