anguhari77 / Python_Semgrep_test

0 stars 0 forks source link

Semgrep Finding - terraform.aws.security.aws-cloudwatch-log-group-no-retention.aws-cloudwatch-log-group-no-retention #2

Closed anguhari77 closed 11 months ago

anguhari77 commented 11 months ago

Path: devsecops-sandbox/test-case/default-workflow/main.tf Line: `resource "aws_cloudwatch_log_group" "this" { name_prefix = local.name_prefix

tags = { Environment = "" } }` Message: The AWS CloudWatch Log Group has no retention. Missing retention in log groups can cause losing important event information. CWE: CWE-320: CWE CATEGORY: Key Management Errors References: ['https://owasp.org/Top10/A02_2021-Cryptographic_Failures']