Describe the issue

Check sources https://github.com/bridgecrewio/checkov/blob/master/checkov/cloudformation/checks/resource/aws/ALBListenerTLS12.py

Examples

  AppLB:
    Type: AWS::ElasticLoadBalancingV2::LoadBalancer
    Properties:
      Scheme: internet-facing
      Type: network                      # <<<<<<<<<<<<<<<<
      Subnets: !Ref Subnets
      LoadBalanc

Some users insist on overwriting an existing tag when publishing their modules to the registry. If they want to immediately validate or consume the module they will have to either run force restore or delete the existing module from the cache.

Should we do it for them automatically?

Description

Some discussion had in the team which is not clearly addressed. What change causes an increment of the different versions when publishing a module?

Write a draft, discuss with the team and adding guidance in the wiki for when to increment the version of IaC modules in the case of:

• breaking change (major update)
• feature change (minor update)
• bug/hot fix (patch update)

Rule request

Suggested rule change

Similar to Azure.Redis.MinTLS, we should include Microsoft.Cache/redisEnterprise type as well to check the minumumTlsVersion property: https://docs.microsoft.com/en-us/azure/templates/microsoft.cache/redisenterprise?tabs=bicep#clusterproperties.

I guess we need to decide if this should be a new rule or simply add this type to the existing rule

One of the really powerful parts of this project is the use of preset configurations.

I think we should look to examine any gaps between what is created in other reference implementations and consider creating new presets for those.

Taking the https://github.com/mspnp/aks-baseline-regulated repo. I believe we're very close, just needing to add Flux/Falco/Kured to the implementation.

Exami