infrastructure-as-code

Description

file.replace with backslash_literal throwing the following traceback.

Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/salt/cli/caller.py", line 218, in call
    ret["return"] = self.minion.executors[fname](
  File "/usr/lib/python3/dist-packages/salt/loader/lazy.py", line 149, in __call__
    return self.loader.run(run_func, *args, **kwargs

Hi, when will Ubuntu 22.04 be supported for APT?

Attempting to install on Jammy using APT shows an error:

E: The repository 'https://aquasecurity.github.io/trivy-repo/deb jammy Release' does not have a Release file.

Describe the bug

When importing an existing EKS cluster into the stack with eks.Cluster.FromClusterAttributes, the KubectlLambdaRole property is ignored, and it uses the default lambda execution role instead. It works fine if you create the cluster with CDK instead.

Expected Behavior

The lambda that is created as part of methods like .AddServiceAccount should execute with th

We are very interested in a a usage file feature. Currently, the breakdown command supports specifying it as a parameter. It brings additional complexity to our CI pipeline, as we try to use the same Terraform code for different environments (dev/qa/prod). And obviously, different environments produce different usage.

So to make

Hello! Trying to write a provider based check to ensure that only certain AWS regions are being specified in Terraform. For testing, to ensure that I generally understand how the BaseProviderChecks worked, I pulled over this check below from the Checkov code and tried running it against my plan file.

import re
from typing import Dict, List, Any

from checkov.common.models.enums import C

• terrascan version: 1.9.0
• terraform version: 1.0.1

Enhancement Request

Other security scanning tools (e.g. checkov and tfsec) have a --soft-fail flag or equivalent option that allows you to always exit with 0 status.

Extremely useful when running the tool without halting a pipeline for example.

I currently use a workaround, but something more concrete would be very desira

The --prod flag has been deprecated, so we should not show that field in the output of the env show command, or in our docs:

https://aws.github.io/copilot-cli/docs/concepts/environments/
https://aws.github.io/copilot-cli/docs/commands/env-show/

Description

Add GCE support for google_project_iam_custom_role (TF)

Sources

• Terraform Resource Documentation
• GCP Resource Documentation