Skip to content

Fix misconfiguration: Give the analytics bucket an owner - #19

Closed
refeed wants to merge 1 commit into
analytics-bucketfrom
fix-owner-tag
Closed

Fix misconfiguration: Give the analytics bucket an owner#19
refeed wants to merge 1 commit into
analytics-bucketfrom
fix-owner-tag

fix: give the analytics bucket an owner

15f3510
Select commit
Loading
Failed to load commit list.
Sign in for the full log view
GitHub Actions / Tirith IaC Governance completed Oct 12, 2026 in 0s

Tirith — 1 warned, 10 passed

🛡️ Tirith — 1 warned, 10 passed

Scanned commit 15f3510 · dir . · workflow github-com-StackGuardian-tirith-action-demo-deploy

+ aws_s3_bucket.analytics                          create
    + bucket = "demo-tirith-action-analytics-790543352839"
    + force_destroy = false
    + tags = {"Demo":"tirith-action-demo","Name":"tirith-action-demo","Owner":"data-platform"}
    + tags_all = {"Demo":"tirith-action-demo","Name":"tirith-action-demo","Owner":"data-platform"}
    … and 23 computed attribute(s), known after apply

Plan: 1 to add, 0 to change, 0 to destroy. 5 unchanged.

Policy Rule Resource
⚠️ __sg.checkov-best-practices checkov-best-practices aws_s3_bucket.analytics, aws_s3_bucket.artifacts
✅ __sg.repo-scan ci-long-lived-cloud-credentials —
✅ __sg.repo-scan ci-untrusted-actions —
✅ __sg.repo-scan ci-risky-triggers —
✅ __sg.repo-scan ci-terraform-validation —
✅ __sg.repo-scan remote-state-backend —
✅ __sg.repo-scan state-encryption —
✅ __sg.repo-scan provider-lock-file —
✅ tirith-demo-cost-ceiling monthly-cost-ceiling —
✅ tirith-demo-opa-check s3-naming-and-region —
✅ tirith-demo-s3-owner-tag s3-buckets-must-declare-an-owner —
⚠️ __sg.checkov-best-practices › checkov-best-practices
  • Ensure S3 buckets should have event notifications enabled
  • Ensure S3 buckets should have event notifications enabled
  • Ensure that S3 bucket has a Public Access block
  • Ensure all data stored in the S3 bucket have versioning enabled
  • Ensure that S3 bucket has cross-region replication enabled
  • Ensure that S3 bucket has cross-region replication enabled
  • Ensure that an S3 bucket has a lifecycle configuration
  • Ensure the S3 bucket has access logging enabled
  • Ensure that S3 buckets are encrypted with KMS by default

Resources:

  • aws_s3_bucket.analytics
  • aws_s3_bucket.artifacts

💵 Estimated monthly cost: 1.00 USD (+1.00 from this change)

✅ 10 passed · View run in StackGuardian

View more details on GitHub Actions