Merge pull request #475 from harkirat22/harkirat22/352

adding an else condition to relate the flow log with vpc
tenable · Jan 15, 2021 · 12f226a · 12f226a
2 parents c313c32 + 39067c7
commit 12f226a
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/pkg/policies/opa/rego/aws/aws_vpc/vpcFlowLogsNotEnabled.rego b/pkg/policies/opa/rego/aws/aws_vpc/vpcFlowLogsNotEnabled.rego
@@ -24,4 +24,8 @@ flowLogExist(vpc, vpc_input) = exists {
     vpc_name := sprintf("aws_vpc.%s", [vpc.name])
 	flow_log_tags_set[vpc_name]
     exists = true
+} else = exists {
+	flow_log_vpcs_set := { vpc_id | input.aws_flow_log[i].type == "aws_flow_log"; vpc_id := split(input.aws_flow_log[i].config.vpc_id, ".")[1] }
+	flow_log_vpcs_set[vpc.name]
+    exists = true
 }