View Code? Open in Web Editor
NEW
This project forked from bridgecrewio /terragoat
TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.
Home Page: https://www.bridgecrew.io/
License: Apache License 2.0
HCL 99.97%
Dockerfile 0.03%
terragoat's People
terragoat's Issues
gke.tf - Ensure legacy Compute Engine instance metadata APIs are Disabled
/terraform/gcp/gke.tf:[6-22]
📃 File Type:
terraform
⛔ Details - Ensure legacy Compute Engine instance metadata APIs are Disabled
aks.tf - Ensure that AKS enables private clusters
/terraform/azure/aks.tf:[1-35]
📃 File Type:
terraform
⛔ Details - Ensure that AKS enables private clusters
application_gateway.tf - Ensure that Application Gateway enables WAF
/terraform/azure/application_gateway.tf:[1-66]
📃 File Type:
terraform
⛔ Details - Ensure that Application Gateway enables WAF
gke.tf - Ensure the GKE Metadata Server is Enabled
/terraform/gcp/gke.tf:[24-31]
📃 File Type:
terraform
⛔ Details - Ensure the GKE Metadata Server is Enabled
es.tf - Ensure all data stored in the Elasticsearch is encrypted with a CMK
/terraform/aws/es.tf:[1-27]
📃 File Type:
terraform
⛔ Details - Ensure all data stored in the Elasticsearch is encrypted with a CMK
gcs.tf - Ensure Cloud storage has versioning enabled
/terraform/gcp/gcs.tf:[1-14]
📃 File Type:
terraform
⛔ Details - Ensure Cloud storage has versioning enabled
networking.tf - Ensure that RDP access is restricted from the internet
/terraform/azure/networking.tf:[69-107]
📃 File Type:
terraform
⛔ Details - Ensure that RDP access is restricted from the internet
aks.tf - Ensure Kubernetes Dashboard is disabled
/terraform/azure/aks.tf:[1-35]
📃 File Type:
terraform
⛔ Details - Ensure Kubernetes Dashboard is disabled
s3.tf - Ensure S3 bucket Object is encrypted by KMS using a customer managed Key (CMK)
/terraform/aws/s3.tf:[24-41]
📃 File Type:
terraform
⛔ Details - Ensure S3 bucket Object is encrypted by KMS using a customer managed Key (CMK)
gke.tf - Ensure use of Binary Authorization
/terraform/gcp/gke.tf:[6-22]
📃 File Type:
terraform
⛔ Details - Ensure use of Binary Authorization
storage.tf - Ensure that 'Secure transfer required' is set to 'Enabled'
/terraform/azure/storage.tf:[23-60]
📃 File Type:
terraform
⛔ Details - Ensure that 'Secure transfer required' is set to 'Enabled'
gke.tf - Ensure Stackdriver Monitoring is set to Enabled on Kubernetes Engine Clusters
/terraform/gcp/gke.tf:[6-22]
📃 File Type:
terraform
⛔ Details - Ensure Stackdriver Monitoring is set to Enabled on Kubernetes Engine Clusters
storage.tf - Ensure that Storage Accounts use customer-managed key for encryption
/terraform/azure/storage.tf:[23-60]
📃 File Type:
terraform
⛔ Details - Ensure that Storage Accounts use customer-managed key for encryption
lambda.tf - Ensure that AWS Lambda function is configured for function-level concurrent execution limit
/terraform/aws/lambda.tf:[31-58]
📃 File Type:
terraform
⛔ Details - Ensure that AWS Lambda function is configured for function-level concurrent execution limit
key_vault.tf - Ensure that key vault enables purge protection
/terraform/azure/key_vault.tf:[1-31]
📃 File Type:
terraform
⛔ Details - Ensure that key vault enables purge protection
key_vault.tf - Ensure that key vault key is backed by HSM
/terraform/azure/key_vault.tf:[33-56]
📃 File Type:
terraform
⛔ Details - Ensure that key vault key is backed by HSM
sql.tf - Ensure that PostgreSQL server disables public network access
/terraform/azure/sql.tf:[73-96]
📃 File Type:
terraform
⛔ Details - Ensure that PostgreSQL server disables public network access
db-app.tf - Ensure Instance Metadata Service Version 1 is not enabled
/terraform/aws/db-app.tf:[242-412]
📃 File Type:
terraform
⛔ Details - Ensure Instance Metadata Service Version 1 is not enabled
es.tf - Verify Elasticsearch domain is using an up to date TLS policy
/terraform/aws/es.tf:[1-27]
📃 File Type:
terraform
⛔ Details - Verify Elasticsearch domain is using an up to date TLS policy
lambda.tf - X-ray tracing is enabled for Lambda
/terraform/aws/lambda.tf:[31-58]
📃 File Type:
terraform
⛔ Details - X-ray tracing is enabled for Lambda
aks.tf - Ensure AKS cluster has Network Policy configured
/terraform/azure/aks.tf:[1-35]
📃 File Type:
terraform
⛔ Details - Ensure AKS cluster has Network Policy configured
security_center.tf - Ensure that 'Send email notification for high severity alerts' is set to 'On'
/terraform/azure/security_center.tf:[5-9]
📃 File Type:
terraform
⛔ Details - Ensure that 'Send email notification for high severity alerts' is set to 'On'
gke.tf - Ensure GKE Control Plane is not public
/terraform/gcp/gke.tf:[6-22]
📃 File Type:
terraform
⛔ Details - Ensure GKE Control Plane is not public
ec2.tf - Ensure all data stored in the S3 bucket have versioning enabled
/terraform/aws/ec2.tf:[271-288]
📃 File Type:
terraform
⛔ Details - Ensure all data stored in the S3 bucket have versioning enabled
gcs.tf - Ensure that Cloud Storage bucket is not anonymously or publicly accessible
/terraform/gcp/gcs.tf:[16-20]
📃 File Type:
terraform
⛔ Details - Ensure that Cloud Storage bucket is not anonymously or publicly accessible
instance.tf - Ensure Azure Instance does not use basic authentication(Use SSH Key Instead)
/terraform/azure/instance.tf:[9-42]
📃 File Type:
terraform
⛔ Details - Ensure Azure Instance does not use basic authentication(Use SSH Key Instead)
sql.tf - Ensure that My SQL server enables geo-redundant backups
/terraform/azure/sql.tf:[44-71]
📃 File Type:
terraform
⛔ Details - Ensure that My SQL server enables geo-redundant backups
ec2.tf - Ensure that only encrypted EBS volumes are attached to EC2 instances
/terraform/aws/ec2.tf:[34-51]
📃 File Type:
terraform
⛔ Details - Ensure that only encrypted EBS volumes are attached to EC2 instances
ec2.tf - Ensure no hard-coded secrets exist in EC2 user data
/terraform/aws/ec2.tf:[1-32]
📃 File Type:
terraform
⛔ Details - Ensure no hard-coded secrets exist in EC2 user data
gke.tf - Ensure Network Policy is enabled on Kubernetes Engine Clusters
/terraform/gcp/gke.tf:[6-22]
📃 File Type:
terraform
⛔ Details - Ensure Network Policy is enabled on Kubernetes Engine Clusters
big_data.tf - Ensure all Cloud SQL database instance have backup configuration enabled
/terraform/gcp/big_data.tf:[1-19]
📃 File Type:
terraform
⛔ Details - Ensure all Cloud SQL database instance have backup configuration enabled
es.tf - Ensure all data stored in the Elasticsearch is securely encrypted at rest
/terraform/aws/es.tf:[1-27]
📃 File Type:
terraform
⛔ Details - Ensure all data stored in the Elasticsearch is securely encrypted at rest
elb.tf - Ensure the ELB has access logging enabled
/terraform/aws/elb.tf:[2-40]
📃 File Type:
terraform
⛔ Details - Ensure the ELB has access logging enabled
gke.tf - Ensure the GKE Release Channel is set
/terraform/gcp/gke.tf:[6-22]
📃 File Type:
terraform
⛔ Details - Ensure the GKE Release Channel is set
db-app.tf - Ensure that RDS instances has backup policy
/terraform/aws/db-app.tf:[1-41]
📃 File Type:
terraform
⛔ Details - Ensure that RDS instances has backup policy
instance.tf - Ensure Windows VM enables encryption
/terraform/azure/instance.tf:[44-77]
📃 File Type:
terraform
⛔ Details - Ensure Windows VM enables encryption
sql.tf - Ensure that My SQL server enables Threat detection policy
/terraform/azure/sql.tf:[44-71]
📃 File Type:
terraform
⛔ Details - Ensure that My SQL server enables Threat detection policy
lambda.tf - Check encryption settings for Lambda environmental variable
/terraform/aws/lambda.tf:[31-58]
📃 File Type:
terraform
⛔ Details - Check encryption settings for Lambda environmental variable
eks.tf - Ensure EKS Cluster has Secrets Encryption Enabled
/terraform/aws/eks.tf:[117-140]
📃 File Type:
terraform
⛔ Details - Ensure EKS Cluster has Secrets Encryption Enabled
app_service.tf - Ensure App Service Authentication is set on Azure App Service
/terraform/azure/app_service.tf:[43-63]
📃 File Type:
terraform
⛔ Details - Ensure App Service Authentication is set on Azure App Service
db-app.tf - Ensure all data stored in the Launch configuration or instance Elastic Blocks Store is securely encrypted
/terraform/aws/db-app.tf:[242-412]
📃 File Type:
terraform
⛔ Details - Ensure all data stored in the Launch configuration or instance Elastic Blocks Store is securely encrypted
ec2.tf - Ensure that S3 buckets are encrypted with KMS by default
/terraform/aws/ec2.tf:[271-288]
📃 File Type:
terraform
⛔ Details - Ensure that S3 buckets are encrypted with KMS by default
gke.tf - Ensure Legacy Authorization is set to Disabled on Kubernetes Engine Clusters
/terraform/gcp/gke.tf:[6-22]
📃 File Type:
terraform
⛔ Details - Ensure Legacy Authorization is set to Disabled on Kubernetes Engine Clusters
sql.tf - Ensure PostgreSQL is using the latest version of TLS encryption
/terraform/azure/sql.tf:[73-96]
📃 File Type:
terraform
⛔ Details - Ensure PostgreSQL is using the latest version of TLS encryption
instances.tf - Ensure that IP forwarding is not enabled on Instances
/terraform/gcp/instances.tf:[3-34]
📃 File Type:
terraform
⛔ Details - Ensure that IP forwarding is not enabled on Instances
neptune.tf - Ensure Neptune storage is securely encrypted
/terraform/aws/neptune.tf:[1-20]
📃 File Type:
terraform
⛔ Details - Ensure Neptune storage is securely encrypted
big_data.tf - Ensure Cloud SQL database does not have public IP
/terraform/gcp/big_data.tf:[1-19]
📃 File Type:
terraform
⛔ Details - Ensure Cloud SQL database does not have public IP
sql.tf - Ensure that 'Send Alerts To' is enabled for MSSQL servers
/terraform/azure/sql.tf:[31-42]
📃 File Type:
terraform
⛔ Details - Ensure that 'Send Alerts To' is enabled for MSSQL servers
es.tf - Ensure that Elasticsearch is configured inside a VPC
/terraform/aws/es.tf:[1-27]
📃 File Type:
terraform
⛔ Details - Ensure that Elasticsearch is configured inside a VPC
aks.tf - Ensure AKS has an API Server Authorized IP Ranges enabled
/terraform/azure/aks.tf:[1-35]
📃 File Type:
terraform
⛔ Details - Ensure AKS has an API Server Authorized IP Ranges enabled
![mend-for-github-com[bot] avatar](https://avatars.githubusercontent.com/in/30796?v=4 "mend-for-github-com[bot]")
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent
