-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathstatic-validation.txt
More file actions
57 lines (55 loc) · 2.68 KB
/
static-validation.txt
File metadata and controls
57 lines (55 loc) · 2.68 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
============================================
Static Validation Tests
============================================
[1] Terraform format check
PASS: All files are properly formatted
[2] Module structure check (modules/vnet)
PASS: modules/vnet/main.tf exists
PASS: modules/vnet/variables.tf exists
PASS: modules/vnet/outputs.tf exists
PASS: modules/vnet/versions.tf exists
PASS: modules/vnet/README.md exists
[3] Variable documentation check
PASS: modules/vnet/variables.tf — all 8 variables documented
PASS: environments/dev/variables.tf — all 9 variables documented
PASS: environments/prod/variables.tf — all 9 variables documented
[4] Output documentation check
PASS: modules/vnet/outputs.tf — all 7 outputs documented
PASS: environments/dev/outputs.tf — all 10 outputs documented
PASS: environments/prod/outputs.tf — all 9 outputs documented
[5] Secret detection
PASS: No hardcoded secrets detected
[6] Provider version constraints
PASS: modules/vnet — Terraform version constraint set
PASS: modules/vnet — required_providers block present
PASS: environments/dev — Terraform version constraint set
PASS: environments/dev — required_providers block present
PASS: environments/prod — Terraform version constraint set
PASS: environments/prod — required_providers block present
[7] Terraform validate
PASS: environments/dev passes terraform validate
PASS: environments/prod passes terraform validate
[8] Resource naming convention
PASS: environments/dev uses name_prefix for consistent naming
PASS: environments/prod uses name_prefix for consistent naming
[9] Tag enforcement check
PASS: environments/dev — 'environment' tag present
PASS: environments/dev — 'project' tag present
PASS: environments/dev — 'region' tag present
PASS: environments/dev — 'managed_by' tag present
PASS: environments/prod — 'environment' tag present
PASS: environments/prod — 'project' tag present
PASS: environments/prod — 'region' tag present
PASS: environments/prod — 'managed_by' tag present
[10] Security configuration check
PASS: environments/dev — TLS 1.2 minimum enforced on storage
PASS: environments/dev — password auth disabled on VM
PASS: environments/dev — network default_action configured (Allow for CI/CD)
PASS: environments/dev — blob container set to private
PASS: environments/prod — TLS 1.2 minimum enforced on storage
PASS: environments/prod — password auth disabled on VM
PASS: environments/prod — network default deny configured
PASS: environments/prod — blob container set to private
============================================
Results: 39 passed, 0 failed
============================================