Hi @vrbcntrl,

In case encryption_property does not have what you want for using encryption is enabled step, you can also drill down the resource with @when(u'it contain {something:ANY}') and @then(u'it must {condition:ANY} have {proto:ANY} protocol and port {port} for {cidr:ANY}') steps.

As a similar example for aws_elb ;

Scenario: TLS enforcement on ELB resources
    Given I have AWS ELB resource defined
    When it contains listener
    Then it must contain ssl_certificate_id

I also added

"aws_elasticache_replication_group": "at_rest_encryption_enabled"

to terraform-compliance 1.0.0 which will be released soon.

For the CHANGELOG, you can have a peek on https://github.com/eerkunt/terraform-compliance/blob/feature/1.0.0/CHANGELOG.md

from cli.

Hi @eerkunt , thanks for your prompt response.

My test case is as follows:

encryption_at_rest.feature

Scenario: AWS Elastic Cache
Given I have AWS Elastic Cache defined
Then encryption must be enabled

encryption_in_flight.feature

Scenario: AWS Elastic Cache
Given I have AWS Elastic Cache defined
Then encryption must be enabled

when I run the above 2 scenarios, separately, the first one i.e at_rest scenario works as expected, however the in_flight scenario always PASSED regardless of the transit_encryption_enabled value (true|false), but if I comment the at_rest_encryption_enabled property as shown below, the in_flight scenario works as expected.
encryption_property = {
"aws_elasticache_replication_group": "transit_encryption_enabled",

"aws_elasticache_replication_group": "at_rest_encryption_enabled"

}

So, I hope this helps to understand the issue.

from cli.

Hi @vrbcntrl,

That is quite normal, because you are running the same test against a same resource. You need to change one of your tests to cover both in-flight and at-rest encryption tests.

Currently, at_rest_encryption_enabled will be used for

Then encryption must be enabled

scenarios for aws_elasticache_replication_group

from cli.

Hi @eerkunt ,
I am able to cover both the encryption properties in a single test using Scenario Outline show below
` Scenario Outline: AWS Elastic Cache Replication Group
Given I have aws_elasticache_replication_group defined
Then it must contain

Examples:
| encryption |
| at_rest_encryption_enabled |
| transit_encryption_enabled |`

please let me know if there is any other better way...i am trying avoid the need for creating a new step :)

from cli.