skip/ignore/suppress resources for AWS CloudFormation about kics HOT 2 CLOSED

Hello.

You are using # kics-scan ignore-block wrong. You need to put before SecurityGroupIngress:, Properties:, DemoSecurityGroup: or Resources:. EDIT: Because there is no block after that comment, just a few lines. A block is like an element of array like:
Description: Allowing port 22 for everyone
IpProtocol: tcp
FromPort: 22
ToPort: 22
CidrIp: "0.0.0.0/0"
or an Object with attributes (like Resources, DemoSecurityGroup, Properties or SecurityGroupIngress

I notice that 5 HIGH vulnerabilities are pointing to the same line (SecurityGroupIngress:). So, you can put # kics-scan ignore-block or # kics-scan ignore-line before that line

Best regards

from kics.

I got that part from the documentation but I do not want to ignore all the rules mentioned in the SecurityGroupIngress: block.

What I am looking for is, Out of two security rules, KICS should ignore one rule (For Port 80) and should scan all other rules mentioned in the resource.

Following rule should be ignored/skip.

        - Description: Allowing port 80 for everyone
          IpProtocol: tcp
          FromPort: 80
          ToPort: 80
          CidrIp: "0.0.0.0/0"

But KICS should continue scan for the following rule:

        - Description: Allowing port 22 for everyone
          IpProtocol: tcp
          FromPort: 22
          ToPort: 22
          CidrIp: "0.0.0.0/0"

from kics.