CKV2_AWS_5 false triggered if security group used in module

[grommir]

The issue Security group is shown as failed checks if referenced in module.

Examples

resource "aws_security_group" "my_sg" {
  ...
}

module "my_module" {
 ...
  vpc_security_group_ids = [aws_security_group.my_sg.id]
}

Ensure that Security Groups are attached to another resource

Version :

• Checkov Version 2.0.1161

[gruebel]

hi @grommir I think this will be tricky to fix. It is definitely a valid use case, but this is probably an issue, due to the intermediate variable source block.

[grommir]

How about just leave it up to the author of the module? And just consider such security group as attached.

[stale[bot]]

Thanks for contributing to Checkov! We've automatically marked this issue as stale to keep our issues list tidy, because it has not had any activity for 6 months. It will be closed in 14 days if no further activity occurs. Commenting on this issue will remove the stale tag. If you want to talk through the issue or help us understand the priority and context, feel free to add a comment or join us in the Checkov slack channel at https://slack.bridgecrew.io Thanks!

[rymancl]

remove stale

[stale[bot]]

Thanks for contributing to Checkov! We've automatically marked this issue as stale to keep our issues list tidy, because it has not had any activity for 6 months. It will be closed in 14 days if no further activity occurs. Commenting on this issue will remove the stale tag. If you want to talk through the issue or help us understand the priority and context, feel free to add a comment or join us in the Checkov slack channel at https://slack.bridgecrew.io Thanks!

[rymancl]

remove stale

[stale[bot]]

Thanks for contributing to Checkov! We've automatically marked this issue as stale to keep our issues list tidy, because it has not had any activity for 6 months. It will be closed in 14 days if no further activity occurs. Commenting on this issue will remove the stale tag. If you want to talk through the issue or help us understand the priority and context, feel free to add a comment or join us in the Checkov slack channel at codifiedsecurity.slack.com Thanks!

[grommir]

remove stale

[neilscallywag]

Hi, has there been any updates on this ?

[stale[bot]]

Thanks for contributing to Checkov! We've automatically marked this issue as stale to keep our issues list tidy, because it has not had any activity for 6 months. It will be closed in 14 days if no further activity occurs. Commenting on this issue will remove the stale tag. If you want to talk through the issue or help us understand the priority and context, feel free to add a comment or join us in the Checkov slack channel at codifiedsecurity.slack.com Thanks!

[grommir]

remove stale