stelligent / cfn_nag

Linting tool for CloudFormation templates
MIT License
1.25k stars 209 forks source link

Add rule for ApiGatewayStage data trace enabled #620

Open lfarvour opened 1 year ago

lfarvour commented 1 year ago

Custom Rule: ApiGatewayStageDataTraceEnabledRule.rb

Violation occurs when ApiGatewayStage has a parameter in the parameter list MethodSettings with the sub-parameter DataTraceEnabled set to true.

Tracing API Gateway stage data may lead to sensittve data in logs.

Custom Rule: sub_property_with_list_truthy_value_base_rule.rb

Support for resource properties that contain a list of properties. Implements raising violation when sub property parameter is not set or is set to true.