AWS Codecommit is not associated with an approval rule

Description

Associating AWS Codecommit with an approval rule ensures that code changes are reviewed by other team members before being merged into the main branch of a repository. This can help identify problems or issues with the code before it is deployed, and can also serve as a means of knowledge sharing among team members.

Code Example

resource "aws_codecommit_repository" "pass" {
  repository_name = "MyTestRepository"
  description     = "This is the Sample App Repository"
}

resource "aws_codecommit_approval_rule_template_association" "example" {
  approval_rule_template_name = aws_codecommit_approval_rule_template.example.name
  repository_name             = aws_codecommit_repository.pass.repository_name
}

Remediation

Terraform

Rule Details

Field	Value
ID	IAC-0471
Severity	LOW
IaC Type	Terraform
Frameworks	Terraform
Checkov ID	CKV2_AWS_37

References

• Checkov Rule

---