fix: resolve checkov findings

makandra · Aug 7, 2024 · 6590620 · 6590620
1 parent 0415c6e
commit 6590620
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/.checkov.yaml b/.checkov.yaml
@@ -0,0 +1,3 @@
+skip-check:
+# modules
+  - CKV_TF_1 # We are fine just using the module tag for the source
diff --git a/modules/eks/kms.tf b/modules/eks/kms.tf
@@ -60,6 +60,7 @@ data "aws_iam_policy_document" "eks_ebs" {
 }
 
 resource "aws_kms_key" "eks" {
+  #checkov:skip=CKV2_AWS_64: We do not need a resource policy for this key
   description             = "EKS Secret Encryption Key"
   deletion_window_in_days = 7
   enable_key_rotation     = true