LASB-3291 Add temp exemptions

ministryofjustice · Jun 10, 2024 · d7c3798 · d7c3798
1 parent a2382fd
commit d7c3798
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 2 deletions.
diff --git a/terraform/environments/mlra/modules/alb/main.tf b/terraform/environments/mlra/modules/alb/main.tf
@@ -503,6 +503,7 @@ resource "aws_waf_rule" "block" {
   }
 }
 
+#checkov:skip=CKV_AWS_176 TODO Will be addressed as part of https://dsdmoj.atlassian.net/browse/LASB-3390
 resource "aws_waf_web_acl" "waf_acl" {
   name        = "${upper(var.application_name)} Whitelisting Requesters"
   metric_name = "${upper(var.application_name)}WhitelistingRequesters"
@@ -656,7 +657,7 @@ resource "aws_athena_workgroup" "lb-access-logs" {
 
 
 ## External LB Cert
-
+#checkov:skip=CKV_AWS_233 TODO Will be addressed as part of https://dsdmoj.atlassian.net/browse/LASB-3390
 resource "aws_acm_certificate" "external_lb" {
 
   domain_name               = var.acm_cert_domain_name
@@ -746,7 +747,7 @@ resource "aws_acm_certificate_validation" "external_lb_certificate_validation" {
 
 ######## Cloudfront Cert
 
-
+#checkov:skip=CKV_AWS_233 TODO Will be addressed as part of https://dsdmoj.atlassian.net/browse/LASB-3390
 resource "aws_acm_certificate" "cloudfront" {
   domain_name               = var.acm_cert_domain_name
   validation_method         = "DNS"

diff --git a/terraform/environments/mlra/modules/cloudwatch/main.tf b/terraform/environments/mlra/modules/cloudwatch/main.tf
@@ -387,6 +387,7 @@ EOF
 
 # SNS topic for monitoring to send alarms to
 #tfsec:ignore:avd-aws-0095 TODO Will be addressed as part of https://dsdmoj.atlassian.net/browse/LASB-3390
+#checkov:skip=CKV_AWS_26 TODO Will be addressed as part of https://dsdmoj.atlassian.net/browse/LASB-3390
 resource "aws_sns_topic" "mlra_alerting_topic" {
   name = var.sns_topic_name
   tags = merge(