Updates tfsec/chekov ignores | S3 Enable Logging/Versioning
No changes are occurring
Ignore comments for aws-s3-enable-bucket-logging; aws-s3-enable-versioning and Checkov equivalent; S3 Data should be versioned - Bucket does not have versioning enabled
# Globally ignore the checks for tfsec
ignored_tfsec = [
"aws-s3-enable-bucket-logging", # TODO: We do not currently log s3 access.
ID - aws-s3-enable-bucket-logging
Severity - High
Impact - Buckets should have logging enabled so that access can be audited.
Resolution - Add a logging block to the resource to enable access logging
tfsec - https://aquasecurity.github.io/tfsec/v1.27.1/checks/aws/s3/enable-bucket-logging/
checkov - https://docs.bridgecrew.io/docs/s3_13-enable-logging
AWS - https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html
ID - aws-s3-enable-versioning
Severity - Medium
Impact - Deleted or modified data would not be recoverable
Resolution - Enable versioning to protect against accidental/malicious removal or modification
More Information
tfsec - https://aquasecurity.github.io/tfsec/v1.27.1/checks/aws/s3/enable-versioning/
checkov - https://docs.bridgecrew.io/docs/s3_16-enable-versioning