Python scan_resource_conf示例

示例#1

 def test_success_default(self):
     hcl_res = hcl2.loads("""
       resource "aws_dms_replication_instance" "private" {
         engine_version               = "3.1.4"
         multi_az                     = false
         replication_instance_class   = "dms.t2.micro"
         replication_instance_id      = "test-dms-replication-instance-tf"
       }
     """)
     resource_conf = hcl_res['resource'][0]['aws_dms_replication_instance'][
         'private']
     scan_result = check.scan_resource_conf(conf=resource_conf)
     self.assertEqual(CheckResult.PASSED, scan_result)

示例#2

文件： test_DMSReplicationInstancePubliclyAccessible.py 项目： stevieg27/checkov

 def test_failure(self):
     hcl_res = hcl2.loads("""
       resource "aws_dms_replication_instance" "public" {
         engine_version               = "3.1.4"
         multi_az                     = false
         publicly_accessible          = true
         replication_instance_class   = "dms.t2.micro"
         replication_instance_id      = "test-dms-replication-instance-tf"
       }
     """)
     resource_conf = hcl_res['resource'][0]['aws_dms_replication_instance'][
         'public']
     scan_result = check.scan_resource_conf(conf=resource_conf)
     self.assertEqual(CheckResult.FAILED, scan_result)