File tree Expand file tree Collapse file tree 2 files changed +22
-9
lines changed
src/rpdk/guard_rail/rule_library/tags Expand file tree Collapse file tree 2 files changed +22
-9
lines changed Original file line number Diff line number Diff line change @@ -137,7 +137,7 @@ rule ensure_property_tags_exists_v2 when tagging exists {
137
137
tagging.permissions exists
138
138
<<
139
139
{
140
- "result": "WARNING ",
140
+ "result": "NON_COMPLIANT ",
141
141
"check_id": "TAG012",
142
142
"message": "Resource MUST provide `permissions` if `tagging.taggable` is true"
143
143
}
Original file line number Diff line number Diff line change 247
247
check_id = "TAG013" ,
248
248
message = "`tagProperty` MUST specify property defined in the schema" ,
249
249
path = "/tagging/tagProperty" ,
250
- )
250
+ ),
251
+ GuardRuleResult (
252
+ check_id = "TAG012" ,
253
+ message = "Resource MUST provide `permissions` if `tagging.taggable` is true" ,
254
+ path = "" ,
255
+ ),
251
256
},
252
257
},
253
258
{},
270
275
check_id = "TAG014" ,
271
276
message = "`tagProperty` MUST NOT be a part of `writeOnlyProperties`" ,
272
277
path = "/tagging/tagProperty" ,
273
- )
278
+ ),
279
+ GuardRuleResult (
280
+ check_id = "TAG012" ,
281
+ message = "Resource MUST provide `permissions` if `tagging.taggable` is true" ,
282
+ path = "" ,
283
+ ),
274
284
},
275
285
},
276
286
{},
@@ -389,19 +399,22 @@ def test_exec_compliance_stateless_aws_verifiedpermissions_policy(
389
399
]
390
400
),
391
401
[],
392
- {},
393
402
{
394
403
"ensure_property_tags_exists_v2" : {
395
- GuardRuleResult (
396
- check_id = "TAG011" ,
397
- message = "Resource MUST implement Tags property if `tagging.taggable` is true" ,
398
- path = "" ,
399
- ),
400
404
GuardRuleResult (
401
405
check_id = "TAG012" ,
402
406
message = "Resource MUST provide `permissions` if `tagging.taggable` is true" ,
403
407
path = "" ,
404
408
),
409
+ }
410
+ },
411
+ {
412
+ "ensure_property_tags_exists_v2" : {
413
+ GuardRuleResult (
414
+ check_id = "TAG011" ,
415
+ message = "Resource MUST implement Tags property if `tagging.taggable` is true" ,
416
+ path = "" ,
417
+ )
405
418
},
406
419
},
407
420
),
You can’t perform that action at this time.
0 commit comments