Questions tagged [policy-as-code]
2 questions
0
votes
0 answers
How do I check in "rego" that aws arn contains both valid bucket name and object name? One way is regex match , but its not giving me valid result
I am running as below :
package play
import future.keywords.if
default hello := false
arn_list := input.message
hello if {
regex.match("aws:arn:s3:::.*/*", arn_list)
}
arn_list is {
"message": "arn:aws:s3:::my_corporate_bucket/ram"
}
I tried…
0
votes
0 answers
Checkov - checking array values within an attribute
I am looking for the operator logic to check values in an array (terraform) - has anyone tackled a similar problem and has a solution?
the resource is like this
resource "google_project_iam_binding" "my_project_iam_bigquery_dataviewer" {
provider…
Matt
- 1,931
- 12
- 20