fix: Make unauthorized pattern match exact (#50)

Pål-Magnus Slåtto · web-flow · commit 03d43d5de5c5 · 2023-01-10T10:31:31.000+01:00
diff --git a/modules/cis-alarms/main.tf b/modules/cis-alarms/main.tf
@@ -1,7 +1,7 @@
 locals {
   all_controls = {
     UnauthorizedAPICalls = {
-      pattern     = "{ (($.errorCode=\"*UnauthorizedOperation\") || ($.errorCode=\"AccessDenied*\")) }"
+      pattern     = "{ ($.errorCode=\"*UnauthorizedOperation\") || ($.errorCode=\"AccessDenied*\") }"
       description = "Monitoring unauthorized API calls will help reveal application errors and may reduce time to detect malicious activity."
     }
 

Original file line number	Diff line number	Diff line change
`@@ -1,7 +1,7 @@`
`1`	`1`	`locals {`
`2`	`2`	`all_controls = {`
`3`	`3`	`UnauthorizedAPICalls = {`
`4`		`- pattern = "{ (($.errorCode=\"UnauthorizedOperation\") \|\| ($.errorCode=\"AccessDenied\")) }"`
	`4`	`+ pattern = "{ ($.errorCode=\"UnauthorizedOperation\") \|\| ($.errorCode=\"AccessDenied\") }"`
`5`	`5`	`description = "Monitoring unauthorized API calls will help reveal application errors and may reduce time to detect malicious activity."`
`6`	`6`	`}`
`7`	`7`