diff --git a/checkov/cloudformation/checks/resource/aws/DocDBAuditLogs.py b/checkov/cloudformation/checks/resource/aws/DocDBAuditLogs.py index 83ce8062abe..fbe70e3625f 100644 --- a/checkov/cloudformation/checks/resource/aws/DocDBAuditLogs.py +++ b/checkov/cloudformation/checks/resource/aws/DocDBAuditLogs.py @@ -1,4 +1,4 @@ -from typing import Any +from typing import Any, List from checkov.cloudformation.checks.resource.base_resource_value_check import BaseResourceValueCheck from checkov.common.models.enums import CheckCategories @@ -15,8 +15,8 @@ def __init__(self) -> None: def get_inspected_key(self) -> str: return "Properties/Parameters/audit_logs" - def get_expected_value(self) -> Any: - return "enabled" + def get_expected_values(self) -> List[Any]: + return ["all", "ddl", "dml_read", "dml_write", "enabled"] check = DocDBAuditLogs()