Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Added fix for the checkov errors. #19

Closed
wants to merge 1 commit into from

Conversation

david-blg
Copy link
Owner

The following errors were resolved:

  • CKV_AWS_120: Enabled API Gateway caching
  • CKV_AWS_76: Configured access logging for API Gateway
  • CKV_AWS_73: Enabled X-Ray tracing for API Gateway

Closes #15

@david-blg david-blg closed this Jul 29, 2024
@david-blg david-blg deleted the fix/aws-security-config branch July 29, 2024 09:02
@atulgoel126
Copy link

I was trying to do this myself, but wasn't able to get it all right. Thanks David for showing me how to do this - appreciate your time and effort.

@david-blg
Copy link
Owner Author

Hi @atulgoel126,

I'm glad to know that the solution was useful to you. I made these changes primarily to test the Checkov tool and fix some of the issues it found. However, I reverted some changes because they required adding unnecessary infrastructure for this example. It's important to note that it's not always necessary to resolve all the problems that Checkov identifies, as this depends on the use case, needs, and objectives of the project.

In this repository, which is a basic example of an AWS Serverless CRUD, I mentioned in the README that for production, you should consider the options that best fit your project's security needs.

Thank you for your comments.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Running checkov on the stack results in validation errors
2 participants