Skip to content

Commit ba86426

Browse files
author
Bob Strahan
committed
Add CDK Nag suppression for W58 CloudWatch Logs permissions in Pattern 1 Lambda function
1 parent 41f7466 commit ba86426

File tree

1 file changed

+2
-0
lines changed

1 file changed

+2
-0
lines changed

patterns/pattern-1/template.yaml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1168,6 +1168,8 @@ Resources:
11681168
reason: "Function does not require VPC access as it only interacts with AWS services via APIs"
11691169
- id: W92
11701170
reason: "Function does not require reserved concurrency as it scales based on demand"
1171+
- id: W58
1172+
reason: "Lambda function has CloudWatch Logs permissions via AWSLambdaBasicExecutionRole managed policy"
11711173
# checkov:skip=CKV_AWS_116: "DLQ not required for Cfn Custom Resource function"
11721174
# checkov:skip=CKV_AWS_117: "Function does not require VPC access as it only interacts with AWS services via APIs"
11731175
# checkov:skip=CKV_AWS_115: "Function does not require reserved concurrency as it scales based on demand"

0 commit comments

Comments
 (0)