[resotocore][fix] compliance checks (#1921)

someengineering · Feb 16, 2024 · c2d0fb3 · c2d0fb3
1 parent 053c786
commit c2d0fb3
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/resotocore/resotocore/static/report/checks/aws/aws_s3.json b/resotocore/resotocore/static/report/checks/aws/aws_s3.json
@@ -10,7 +10,7 @@
             "risk": "If the issue is not solved, there is a risk of data-at-rest being unencrypted, which can pose a threat to the confidentiality and integrity of stored objects.",
             "severity": "medium",
             "detect": {
-                "resoto": "is(aws_s3_bucket) and not bucket_encryption_rules[*].sse_algorithm!=null"
+                "resoto": "is(aws_s3_bucket) and bucket_encryption_rules[*].{sse_algorithm==null}"
             },
             "remediation": {
                 "action": {

diff --git a/resotocore/resotocore/static/report/checks/aws/aws_secretsmanager.json b/resotocore/resotocore/static/report/checks/aws/aws_secretsmanager.json
@@ -33,7 +33,7 @@
             "risk": "If not solved, there is a risk of potential unauthorized access, lack of tracking or auditing, non-compliance with data retention policies, and increased exposure time for potential breaches.",
             "severity": "medium",
             "detect": {
-                "resoto": "is(aws_secretsmanager_secret) and last_accessed_date < {{secret_too_old_age.from_now}}"
+                "resoto": "is(aws_secretsmanager_secret) and last_accessed_date < {{secret_too_old_age.ago}}"
             },
             "default_values": {
                 "secret_too_old_age": "90d"
@@ -59,7 +59,7 @@
             "risk": "If secrets are not changed in the last 90 days, it indicates that they are no longer in use and can be removed.",
             "severity": "medium",
             "detect": {
-                "resoto": "is(aws_secretsmanager_secret) and last_changed_date<{{secret_too_old_age.from_now}}"
+                "resoto": "is(aws_secretsmanager_secret) and last_changed_date<{{secret_too_old_age.ago}}"
             },
             "default_values": {
                 "secret_too_old_age": "90d"