hlxsites / hlxsites/prisma-cloud-docs
Invalid fix for CKV_GCP_114
- Dominant language
- JavaScript
- Stars
- 21
- Forks
- 92
- PR merge metrics
- No merged PRs in 30d
Description
The proposed fix for this issue contains incorrect Terraform code. The `iam_configuration {}` block is invalid for `google_storage_bucket`. Also `uniform_bucket_level_access` appears twice in the existing doc.
The Terraform argument `public_access_prevention` is correct but it is in the wrong place. See below:
## Existing Fix for CKV_GCP_114
https://github.com/hlxsites/prisma-cloud-docs/blob/2aefc44ebf6dfdf71b09aa3646f6bf5ffa7be37e/docs/en/enterprise-edition/policy-reference/google-cloud-policies/google-cloud-general-policies/bc-google-cloud-114.adoc?plain=1#L41-L54
## Actual Fix
```terraform
resource "google_storage_bucket" "example_bucket" {
name = "example_bucket"
location = "US"
uniform_bucket_level_access = true
public_access_prevention = "enforced"
bucket_policy_only = true
}
```
Contributor guide
Research direction
Open the referenced docs/en/enterprise-edition/policy-reference/google-cloud-policies/google-cloud-general-policies/bc-google-cloud-114.adoc file around lines 41-54. Check the existing Terraform example against the supplied correction, remove the invalid block and duplicate argument, and confirm the rendered policy reference shows the valid configuration.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- gcp, terraform
- Domain
- cloud, documentation
- Issue type
- Bug
- Difficulty
- 1/5
- Estimated time
- Under an hour
- Activity status
- Stale
- Clarity
- Clearly specified
- Newbie friendliness
- 58/100