Possible Security Problems

[ctindall]

Hey there! I noticed some possible problems in some code in this repo. A quick summary of a few of them is below, but let me know if you're interested in seeing a full report or talking about cloud security in general.

---

severity: serious

filename: ./site/cf-templates/template-workshops-setup.yaml

line number(s): [244, 321, 499, 628]

resource(s):

IAM policy should not allow * resource with PassRole action

---

severity: warning

filename: ./site/cf-templates/template-workshops-setup.yaml

line number(s): [70, 93]

resource(s):

EC2 Subnet should not have MapPublicIpOnLaunch set to true

---

severity: warning

filename: ./site/cf-templates/template-workshops-setup.yaml

line number(s): [244, 321, 499, 628]

resource(s):

IAM policy should not allow * resource

---

severity: warning

filename: ./site/cf-templates/template-workshops-setup.yaml

line number(s): [349, 227, 305, 482, 611]

resource(s):

Resource found with an explicit name, this disallows updates that require replacement of this resource

---

severity: warning

filename: ./site/cf-templates/template-workshops-setup.yaml

line number(s): [164]

resource(s):

S3 Bucket should have access logging configured

---

severity: warning

filename: ./site/cf-templates/template-workshops-setup.yaml

line number(s): [164]

resource(s):

S3 Bucket should have encryption option set

---

severity: warning

filename: ./usecase-7/cf-templates/template-app-dev.yaml

line number(s): [70, 93]

resource(s):

EC2 Subnet should not have MapPublicIpOnLaunch set to true