From ab73e0a1575145302c185bb13e0f25dde2734365 Mon Sep 17 00:00:00 2001 From: "prisma-cloud-devsecops[bot]" <89982750+prisma-cloud-devsecops[bot]@users.noreply.github.com> Date: Thu, 25 Aug 2022 02:29:31 +0000 Subject: [PATCH 1/3] Prisma Cloud has found BC_AWS_GENERAL_63 From ec00918addf133e77fdc4a066838e135e43f7d0a Mon Sep 17 00:00:00 2001 From: "prisma-cloud-devsecops[bot]" <89982750+prisma-cloud-devsecops[bot]@users.noreply.github.com> Date: Sat, 27 Aug 2022 17:19:47 +0000 Subject: [PATCH 2/3] Prisma Cloud has found BC_AWS_S3_14 and 3 other error(s) --- cfngoat.yaml | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/cfngoat.yaml b/cfngoat.yaml index 638d875f..bf54eed1 100644 --- a/cfngoat.yaml +++ b/cfngoat.yaml @@ -996,6 +996,14 @@ Resources: Value: jonathan.jozwiak@googlemail.com - Key: yor_trace Value: 9e00e7c2-b27c-4141-af5a-2d90c9632a23 + BucketEncryption: + ServerSideEncryptionConfiguration: + - ServerSideEncryptionByDefault: + SSEAlgorithm: AES256 + PublicAccessBlockConfiguration: + BlockPublicPolicy: True + IgnorePublicAcls: True + RestrictPublicBuckets: True DataScienceBucket: # not encrypted Type: AWS::S3::Bucket From 33fc6280d328edda4e605e41749cf403e463fbfa Mon Sep 17 00:00:00 2001 From: RI-311 <74549618+Raqeeb311@users.noreply.github.com> Date: Sun, 16 Mar 2025 16:46:26 +1100 Subject: [PATCH 3/3] test --- cfngoat.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/cfngoat.yaml b/cfngoat.yaml index bf54eed1..f7b8f8ef 100644 --- a/cfngoat.yaml +++ b/cfngoat.yaml @@ -25,11 +25,11 @@ Parameters: Default: /aws/service/ami-amazon-linux-latest/amzn2-ami-hvm-x86_64-gp2 Resources: - #################### + ###'sts:AssumeRole'"make it work "################### ### EC2 in VPC ### #################### EC2Instance: - Type: AWS::EC2::Instance + Type: AWS::EC2::Instancsssssssss Properties: AvailabilityZone: Fn::Select: