bridgecrewio / checkov

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
https://www.checkov.io/
Apache License 2.0
6.71k stars 1.08k forks source link

CKV_AWS_104 - Replace 'enabled' with non legacy / deprecated value #6438

Open GadgetGeekNI opened 2 weeks ago

GadgetGeekNI commented 2 weeks ago

https://github.com/bridgecrewio/checkov/blob/f71452c6e164c6e033ddf3e15c9a08652e08ec1c/checkov/cloudformation/checks/resource/aws/DocDBAuditLogs.py#L19

As per the AWS Docs;

enabled (legacy) | This is a legacy parameter setting that is equivalent to 'ddl'. Setting this will enable auditing for DDL events such as createDatabase, dropDatabase, createCollection, dropCollection, createIndex, dropIndex, authCheck, authenticate, createUser, dropUser, grantRolesToUser, revokeRolesFromUser, updateUser, and dropAllUsersFromDatabase. We do not recommend using this setting because it is a legacy setting.

Can we update this to match any other appropriate string such as ; all or ddl etc