Last active
July 17, 2023 14:29
-
-
Save dinhanhhuy/19b23d2e7ab9ada1afffa35b5d388f4e to your computer and use it in GitHub Desktop.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| deny_network_acl_rule_0_0_0_0_0 { | |
| denied_actions = ["aws_network_acl_rule.create"] | |
| # This rule is triggered if any AWS network ACL rule allows IP range 0.0.0.0/0 | |
| rule = any tfplan.resource_changes as _, rc { | |
| rc.type is "aws_network_acl_rule" and | |
| rc.change.after.addresses is ["0.0.0.0/0"] | |
| } | |
| } |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment