Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add the option to suppress a Rule for a single construct #350

Open
gianlucb opened this issue Apr 5, 2024 · 0 comments
Open

Add the option to suppress a Rule for a single construct #350

gianlucb opened this issue Apr 5, 2024 · 0 comments

Comments

@gianlucb
Copy link

gianlucb commented Apr 5, 2024

I'm evaluating to move from CDK_NAG to this library, but found some missing functionalities.
In CDK_NAG is possible to suppress a rule for a given construct (or path):

NagSuppressions.addResourceSuppressions(test, [{ id: 'AwsSolutions-EC23', reason: 'lorem ipsum' }, ]);

I cannot find a way to do the same here.

A common use case:

You create two S3 buckets, the first has the Logging configured to store the logs in the second bucket (B1-->B2); the second bucket does not have any logging configuration, as being used as access logging bucket.

The second bucket will fail with:

[CT.S3.PR.2]: Require an Amazon S3 bucket to have server access logging configured

I cannot configure the logging for this second bucket, as it will requires a third one, 4th...

The only way is to instruct the library to ignore this rule for the second bucket, but not the other ones.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant