BOM - AWS Kinesis

  • Query id: d53323be-dde6-4457-9a43-42df737e71d2
  • Query name: BOM - AWS Kinesis
  • Platform: CloudFormation
  • Severity: Trace
  • Category: Bill Of Materials
  • CWE: 532
  • URL: Github

Description

A list of Kinesis resources found. Amazon Kinesis is a real-time streaming service that provides collection, processing, and analysis of video and data streams in real-time
Documentation

Code samples

Code samples with security vulnerabilities

Positive test num. 1 - yaml file
Description: Kinesis
Resources:
  MyStream: 
    Type: AWS::Kinesis::Stream 
    Properties: 
        Name: MyKinesisStream1
        RetentionPeriodHours: 168 
        ShardCount: 3 
        StreamEncryption:
            EncryptionType: KMS 
            KeyId: !Ref myKey
Positive test num. 2 - json file
{
  "Description": "Kinesis",
  "Resources": {
    "MyStream2": {
      "Type": "AWS::Kinesis::Stream",
      "Properties": {
        "Name": "MyKinesisStream2",
        "RetentionPeriodHours": 168,
        "ShardCount": 3
      }
    }
  }
}

Code samples without security vulnerabilities

Negative test num. 1 - yaml file
AWSTemplateFormatVersion: '2010-09-09'
Resources:
  myDistribution:
    Type: AWS::CloudFront::Distribution
    Properties:
      DistributionConfig:
        Enabled: true
Negative test num. 2 - json file
{
  "AWSTemplateFormatVersion": "2010-09-09",
  "Resources": {
    "myDistribution": {
      "Type": "AWS::CloudFront::Distribution",
      "Properties": {
        "DistributionConfig": {
          "Enabled": "true"
        }
      }
    }
  }
}