Support AWS provider version 4.0.0

[HorizonNet]

• terrascan version: 1.12.0
• Operating System: Ubuntu 20.04

Description

The latest AWS provider version 4.0.0 introduces multiple breaking changes, especially regarding the aws_s3_bucket resource (see the migration guide).

What I Did

The following snippet will mark these violations due to a change in the resource structure:

• Ensure that S3 Buckets have server side encryption at rest enabled with KMS key to protect sensitive data.
• Enabling S3 versioning will enable easy recovery from both unintended user actions, like deletes and overwrites

resource "aws_s3_bucket" "example" {
  bucket = "example"
}

resource "aws_s3_bucket_acl" "example" {
  bucket = aws_s3_bucket.example.id
  acl    = "private"
}

resource "aws_s3_bucket_server_side_encryption_configuration" "example" {
  bucket = aws_s3_bucket.example.id

  rule {
    apply_server_side_encryption_by_default {
      kms_master_key_id = aws_kms_key.example.arn
      sse_algorithm     = "aws:kms"
    }
  }
}

resource "aws_s3_bucket_versioning" "example" {
  bucket = aws_s3_bucket.example.id

  versioning_configuration {
    status = "Enabled"
  }
}

resource "aws_kms_key" "example" {
  description         = "example"
  enable_key_rotation = true
  multi_region        = false
}

[zanilgupta]

Do we have any solution for this change ?

[cesar-rodriguez]

@zanilgupta not yet. We need to update the policies to account for this change.