terraform resource scans (auto generated)

	Id	Type	Entity	Policy	IaC
0	CKV_AWS_1	data	aws_iam_policy_document	Ensure IAM policies that allow full “-” administrative privileges are not created	Terraform
1	CKV_AWS_2	resource	aws_lb_listener	Ensure ALB protocol is HTTPS	Terraform
2	CKV_AWS_3	resource	aws_ebs_volume	Ensure all data stored in the EBS is securely encrypted	Terraform
3	CKV_AWS_5	resource	aws_elasticsearch_domain	Ensure all data stored in the Elasticsearch is securely encrypted at rest	Terraform
4	CKV_AWS_6	resource	aws_elasticsearch_domain	Ensure all Elasticsearch has node-to-node encryption enabled	Terraform
5	CKV_AWS_7	resource	aws_kms_key	Ensure rotation for customer created CMKs is enabled	Terraform
6	CKV_AWS_8	resource	aws_instance	Ensure all data stored in the Launch configuration EBS is securely encrypted	Terraform
7	CKV_AWS_8	resource	aws_launch_configuration	Ensure all data stored in the Launch configuration EBS is securely encrypted	Terraform
8	CKV_AWS_9	resource	aws_iam_account_password_policy	Ensure IAM password policy expires passwords within 90 days or less	Terraform
9	CKV_AWS_10	resource	aws_iam_account_password_policy	Ensure IAM password policy requires minimum length of 14 or greater	Terraform
10	CKV_AWS_11	resource	aws_iam_account_password_policy	Ensure IAM password policy requires at least one lowercase letter	Terraform
11	CKV_AWS_12	resource	aws_iam_account_password_policy	Ensure IAM password policy requires at least one number	Terraform
12	CKV_AWS_13	resource	aws_iam_account_password_policy	Ensure IAM password policy prevents password reuse	Terraform
13	CKV_AWS_14	resource	aws_iam_account_password_policy	Ensure IAM password policy requires at least one symbol	Terraform
14	CKV_AWS_15	resource	aws_iam_account_password_policy	Ensure IAM password policy requires at least one uppercase letter	Terraform
15	CKV_AWS_16	resource	aws_db_instance	Ensure all data stored in the RDS is securely encrypted at rest	Terraform
16	CKV_AWS_17	resource	aws_db_instance	Ensure all data stored in RDS is not publicly accessible	Terraform
17	CKV_AWS_17	resource	aws_rds_cluster_instance	Ensure all data stored in RDS is not publicly accessible	Terraform
18	CKV_AWS_18	resource	aws_s3_bucket	Ensure the S3 bucket has access logging enabled	Terraform
19	CKV_AWS_19	resource	aws_s3_bucket	Ensure all data stored in the S3 bucket is securely encrypted at rest	Terraform
20	CKV_AWS_20	resource	aws_s3_bucket	S3 Bucket has an ACL defined which allows public READ access.	Terraform
21	CKV_AWS_21	resource	aws_s3_bucket	Ensure all data stored in the S3 bucket have versioning enabled	Terraform
22	CKV_AWS_22	resource	aws_sagemaker_notebook_instance	Ensure SageMaker Notebook is encrypted at rest using KMS CMK	Terraform
23	CKV_AWS_23	resource	aws_security_group	Ensure every security groups rule has a description	Terraform
24	CKV_AWS_23	resource	aws_security_group_rule	Ensure every security groups rule has a description	Terraform
25	CKV_AWS_23	resource	aws_db_security_group	Ensure every security groups rule has a description	Terraform
26	CKV_AWS_23	resource	aws_elasticache_security_group	Ensure every security groups rule has a description	Terraform
27	CKV_AWS_23	resource	aws_redshift_security_group	Ensure every security groups rule has a description	Terraform
28	CKV_AWS_24	resource	aws_security_group	Ensure no security groups allow ingress from 0.0.0.0:0 to port 22	Terraform
29	CKV_AWS_24	resource	aws_security_group_rule	Ensure no security groups allow ingress from 0.0.0.0:0 to port 22	Terraform
30	CKV_AWS_25	resource	aws_security_group	Ensure no security groups allow ingress from 0.0.0.0:0 to port 3389	Terraform
31	CKV_AWS_25	resource	aws_security_group_rule	Ensure no security groups allow ingress from 0.0.0.0:0 to port 3389	Terraform
32	CKV_AWS_26	resource	aws_sns_topic	Ensure all data stored in the SNS topic is encrypted	Terraform
33	CKV_AWS_27	resource	aws_sqs_queue	Ensure all data stored in the SQS queue is encrypted	Terraform
34	CKV_AWS_28	resource	aws_dynamodb_table	Ensure Dynamodb point in time recovery (backup) is enabled	Terraform
35	CKV_AWS_29	resource	aws_elasticache_replication_group	Ensure all data stored in the Elasticache Replication Group is securely encrypted at rest	Terraform
36	CKV_AWS_30	resource	aws_elasticache_replication_group	Ensure all data stored in the Elasticache Replication Group is securely encrypted at transit	Terraform
37	CKV_AWS_31	resource	aws_elasticache_replication_group	Ensure all data stored in the Elasticache Replication Group is securely encrypted at transit and has auth token	Terraform
38	CKV_AWS_32	resource	aws_ecr_repository_policy	Ensure ECR policy is not set to public	Terraform
39	CKV_AWS_33	resource	aws_kms_key	Ensure KMS key policy does not contain wildcard (*) principal	Terraform
40	CKV_AWS_34	resource	aws_cloudfront_distribution	Ensure cloudfront distribution ViewerProtocolPolicy is set to HTTPS	Terraform
41	CKV_AWS_35	resource	aws_cloudtrail	Ensure CloudTrail logs are encrypted at rest using KMS CMKs	Terraform
42	CKV_AWS_36	resource	aws_cloudtrail	Ensure CloudTrail log file validation is enabled	Terraform
43	CKV_AWS_37	resource	aws_eks_cluster	Ensure Amazon EKS control plane logging enabled for all log types	Terraform
44	CKV_AWS_38	resource	aws_eks_cluster	Ensure Amazon EKS public endpoint not accessible to 0.0.0.0/0	Terraform
45	CKV_AWS_39	resource	aws_eks_cluster	Ensure Amazon EKS public endpoint disabled	Terraform
46	CKV_AWS_40	resource	aws_iam_user_policy	Ensure IAM policies are attached only to groups or roles (Reducing access management complexity may in-turn reduce opportunity for a principal to inadvertently receive or retain excessive privileges.)	Terraform
47	CKV_AWS_40	resource	aws_iam_user_policy_attachment	Ensure IAM policies are attached only to groups or roles (Reducing access management complexity may in-turn reduce opportunity for a principal to inadvertently receive or retain excessive privileges.)	Terraform
48	CKV_AWS_40	resource	aws_iam_policy_attachment	Ensure IAM policies are attached only to groups or roles (Reducing access management complexity may in-turn reduce opportunity for a principal to inadvertently receive or retain excessive privileges.)	Terraform
49	CKV_AWS_41	provider	aws	Ensure no hard coded AWS access key and secret key exists in provider	Terraform
50	CKV_AWS_42	resource	aws_efs_file_system	Ensure EFS is securely encrypted	Terraform
51	CKV_AWS_43	resource	aws_kinesis_stream	Ensure Kinesis Stream is securely encrypted	Terraform
52	CKV_AWS_44	resource	aws_neptune_cluster	Ensure Neptune storage is securely encrypted	Terraform
53	CKV_AWS_45	resource	aws_lambda_function	Ensure no hard-coded secrets exist in lambda environment	Terraform
54	CKV_AWS_46	resource	aws_instance	Ensure no hard-coded secrets exist in EC2 user data	Terraform
55	CKV_AWS_47	resource	aws_dax_cluster	Ensure DAX is encrypted at rest (default is unencrypted)	Terraform
56	CKV_AWS_48	resource	aws_mq_broker	Ensure MQ Broker logging is enabled	Terraform
57	CKV_AWS_49	data	aws_iam_policy_document	Ensure no IAM policies documents allow “*” as a statement’s actions	Terraform
58	CKV_AWS_50	resource	aws_lambda_function	X-ray tracing is enabled for Lambda	Terraform
59	CKV_AWS_51	resource	aws_ecr_repository	Ensure ECR Image Tags are immutable	Terraform
60	CKV_AWS_53	resource	aws_s3_bucket_public_access_block	Ensure S3 bucket has block public ACLS enabled	Terraform
61	CKV_AWS_54	resource	aws_s3_bucket_public_access_block	Ensure S3 bucket has block public policy enabled	Terraform
62	CKV_AWS_55	resource	aws_s3_bucket_public_access_block	Ensure S3 bucket has ignore public ACLs enabled	Terraform
63	CKV_AWS_56	resource	aws_s3_bucket_public_access_block	Ensure S3 bucket has ‘restrict_public_bucket’ enabled	Terraform
64	CKV_AWS_57	resource	aws_s3_bucket	S3 Bucket has an ACL defined which allows public WRITE access.	Terraform
65	CKV_AWS_58	resource	aws_eks_cluster	Ensure EKS Cluster has Secrets Encryption Enabled	Terraform
66	CKV_AWS_59	resource	aws_api_gateway_method	Ensure there is no open access to back-end resources through API	Terraform
67	CKV_AWS_60	resource	aws_iam_role	Ensure IAM role allows only specific services or principals to assume it	Terraform
68	CKV_AWS_61	resource	aws_iam_role	Ensure IAM role allows only specific principals in account to assume it	Terraform
69	CKV_AWS_62	resource	aws_iam_role_policy	Ensure IAM policies that allow full “-” administrative privileges are not created	Terraform
70	CKV_AWS_62	resource	aws_iam_user_policy	Ensure IAM policies that allow full “-” administrative privileges are not created	Terraform
71	CKV_AWS_62	resource	aws_iam_group_policy	Ensure IAM policies that allow full “-” administrative privileges are not created	Terraform
72	CKV_AWS_62	resource	aws_iam_policy	Ensure IAM policies that allow full “-” administrative privileges are not created	Terraform
73	CKV_AWS_62	resource	aws_ssoadmin_permission_set_inline_policy	Ensure IAM policies that allow full “-” administrative privileges are not created	Terraform
74	CKV_AWS_63	resource	aws_iam_role_policy	Ensure no IAM policies documents allow “*” as a statement’s actions	Terraform
75	CKV_AWS_63	resource	aws_iam_user_policy	Ensure no IAM policies documents allow “*” as a statement’s actions	Terraform
76	CKV_AWS_63	resource	aws_iam_group_policy	Ensure no IAM policies documents allow “*” as a statement’s actions	Terraform
77	CKV_AWS_63	resource	aws_iam_policy	Ensure no IAM policies documents allow “*” as a statement’s actions	Terraform
78	CKV_AWS_63	resource	aws_ssoadmin_permission_set_inline_policy	Ensure no IAM policies documents allow “*” as a statement’s actions	Terraform
79	CKV_AWS_64	resource	aws_redshift_cluster	Ensure all data stored in the Redshift cluster is securely encrypted at rest	Terraform
80	CKV_AWS_65	resource	aws_ecs_cluster	Ensure container insights are enabled on ECS cluster	Terraform
81	CKV_AWS_66	resource	aws_cloudwatch_log_group	Ensure that CloudWatch Log Group specifies retention days	Terraform
82	CKV_AWS_67	resource	aws_cloudtrail	Ensure CloudTrail is enabled in all Regions	Terraform
83	CKV_AWS_68	resource	aws_cloudfront_distribution	CloudFront Distribution should have WAF enabled	Terraform
84	CKV_AWS_69	resource	aws_mq_broker	Ensure MQ Broker is not publicly exposed	Terraform
85	CKV_AWS_70	resource	aws_s3_bucket	Ensure S3 bucket does not allow an action with any Principal	Terraform
86	CKV_AWS_70	resource	aws_s3_bucket_policy	Ensure S3 bucket does not allow an action with any Principal	Terraform
87	CKV_AWS_71	resource	aws_redshift_cluster	Ensure Redshift Cluster logging is enabled	Terraform
88	CKV_AWS_72	resource	aws_sqs_queue_policy	Ensure SQS policy does not allow ALL (*) actions.	Terraform
89	CKV_AWS_73	resource	aws_api_gateway_stage	Ensure API Gateway has X-Ray Tracing enabled	Terraform
90	CKV_AWS_74	resource	aws_docdb_cluster	Ensure DocDB is encrypted at rest (default is unencrypted)	Terraform
91	CKV_AWS_75	resource	aws_globalaccelerator_accelerator	Ensure Global Accelerator accelerator has flow logs enabled	Terraform
92	CKV_AWS_76	resource	aws_api_gateway_stage	Ensure API Gateway has Access Logging enabled	Terraform
93	CKV_AWS_76	resource	aws_apigatewayv2_stage	Ensure API Gateway has Access Logging enabled	Terraform
94	CKV_AWS_77	resource	aws_athena_database	Ensure Athena Database is encrypted at rest (default is unencrypted)	Terraform
95	CKV_AWS_78	resource	aws_codebuild_project	Ensure that CodeBuild Project encryption is not disabled	Terraform
96	CKV_AWS_79	resource	aws_instance	Ensure Instance Metadata Service Version 1 is not enabled	Terraform
97	CKV_AWS_79	resource	aws_launch_template	Ensure Instance Metadata Service Version 1 is not enabled	Terraform
98	CKV_AWS_80	resource	aws_msk_cluster	Ensure MSK Cluster logging is enabled	Terraform
99	CKV_AWS_81	resource	aws_msk_cluster	Ensure MSK Cluster encryption in rest and transit is enabled	Terraform
100	CKV_AWS_82	resource	aws_athena_workgroup	Ensure Athena Workgroup should enforce configuration to prevent client disabling encryption	Terraform
101	CKV_AWS_83	resource	aws_elasticsearch_domain	Ensure Elasticsearch Domain enforces HTTPS	Terraform
102	CKV_AWS_84	resource	aws_elasticsearch_domain	Ensure Elasticsearch Domain Logging is enabled	Terraform
103	CKV_AWS_85	resource	aws_docdb_cluster	Ensure DocDB Logging is enabled	Terraform
104	CKV_AWS_86	resource	aws_cloudfront_distribution	Ensure Cloudfront distribution has Access Logging enabled	Terraform
105	CKV_AWS_87	resource	aws_redshift_cluster	Redshift cluster should not be publicly accessible	Terraform
106	CKV_AWS_88	resource	aws_instance	EC2 instance should not have public IP.	Terraform
107	CKV_AWS_88	resource	aws_launch_template	EC2 instance should not have public IP.	Terraform
108	CKV_AWS_89	resource	aws_dms_replication_instance	DMS replication instance should not be publicly accessible	Terraform
109	CKV_AWS_90	resource	aws_docdb_cluster_parameter_group	Ensure DocDB TLS is not disabled	Terraform
110	CKV_AWS_91	resource	aws_lb	Ensure the ELBv2 (Application/Network) has access logging enabled	Terraform
111	CKV_AWS_91	resource	aws_alb	Ensure the ELBv2 (Application/Network) has access logging enabled	Terraform
112	CKV_AWS_92	resource	aws_elb	Ensure the ELB has access logging enabled	Terraform
113	CKV_AWS_93	resource	aws_s3_bucket	Ensure S3 bucket policy does not lockout all but root user. (Prevent lockouts needing root account fixes)	Terraform
114	CKV_AWS_93	resource	aws_s3_bucket_policy	Ensure S3 bucket policy does not lockout all but root user. (Prevent lockouts needing root account fixes)	Terraform
115	CKV_AWS_94	resource	aws_glue_data_catalog_encryption_settings	Ensure Glue Data Catalog Encryption is enabled	Terraform
116	CKV_AWS_96	resource	aws_rds_cluster	Ensure all data stored in Aurora is securely encrypted at rest	Terraform
117	CKV_AWS_97	resource	aws_ecs_task_definition	Ensure Encryption in transit is enabled for EFS volumes in ECS Task definitions	Terraform
118	CKV_AWS_98	resource	aws_sagemaker_endpoint_configuration	Ensure all data stored in the Sagemaker Endpoint is securely encrypted at rest	Terraform
119	CKV_AWS_99	resource	aws_glue_security_configuration	Ensure Glue Security Configuration Encryption is enabled	Terraform
120	CKV_AWS_100	resource	aws_eks_node_group	Ensure Amazon EKS Node group has implict SSH access from 0.0.0.0/0	Terraform
121	CKV_AWS_101	resource	aws_neptune_cluster	Ensure Neptune logging is enabled	Terraform
122	CKV_AWS_102	resource	aws_neptune_cluster_instance	Ensure Neptune Cluster instance is not publicly available	Terraform
123	CKV_AWS_103	resource	aws_lb_listener	Ensure that load balancer is using TLS 1.2	Terraform
124	CKV_AWS_104	resource	aws_docdb_cluster_parameter_group	Ensure DocDB has audit logs enabled	Terraform
125	CKV_AWS_105	resource	aws_redshift_parameter_group	Ensure Redshift uses SSL	Terraform
126	CKV_AWS_106	resource	aws_ebs_encryption_by_default	Ensure EBS default encryption is enabled	Terraform
127	CKV_AWS_107	data	aws_iam_policy_document	Ensure IAM policies does not allow credentials exposure	Terraform
128	CKV_AWS_108	data	aws_iam_policy_document	Ensure IAM policies does not allow data exfiltration	Terraform
129	CKV_AWS_109	data	aws_iam_policy_document	Ensure IAM policies does not allow permissions management / resource exposure without constraints	Terraform
130	CKV_AWS_110	data	aws_iam_policy_document	Ensure IAM policies does not allow privilege escalation	Terraform
131	CKV_AWS_111	data	aws_iam_policy_document	Ensure IAM policies does not allow write access without constraints	Terraform
132	CKV_AWS_112	resource	aws_ssm_document	Ensure Session Manager data is encrypted in transit	Terraform
133	CKV_AWS_113	resource	aws_ssm_document	Ensure Session Manager logs are enabled and encrypted	Terraform
134	CKV_AWS_114	resource	aws_emr_cluster	Ensure that EMR clusters with Kerberos have Kerberos Realm set	Terraform
135	CKV_AWS_115	resource	aws_lambda_function	Ensure that AWS Lambda function is configured for function-level concurrent execution limit	Terraform
136	CKV_AWS_116	resource	aws_lambda_function	Ensure that AWS Lambda function is configured for a Dead Letter Queue(DLQ)	Terraform
137	CKV_AWS_117	resource	aws_lambda_function	Ensure that AWS Lambda function is configured inside a VPC	Terraform
138	CKV_AWS_118	resource	aws_db_instance	Ensure that enhanced monitoring is enabled for Amazon RDS instances	Terraform
139	CKV_AWS_118	resource	aws_rds_cluster_instance	Ensure that enhanced monitoring is enabled for Amazon RDS instances	Terraform
140	CKV_AWS_119	resource	aws_dynamodb_table	Ensure DynamoDB Tables are encrypted using a KMS Customer Managed CMK	Terraform
141	CKV_AWS_120	resource	aws_api_gateway_stage	Ensure API Gateway caching is enabled	Terraform
142	CKV_AWS_121	resource	aws_config_configuration_aggregator	Ensure AWS Config is enabled in all regions	Terraform
143	CKV_AWS_122	resource	aws_sagemaker_notebook_instance	Ensure that direct internet access is disabled for an Amazon SageMaker Notebook Instance	Terraform
144	CKV_AWS_123	resource	aws_vpc_endpoint_service	Ensure that VPC Endpoint Service is configured for Manual Acceptance	Terraform
145	CKV_AWS_124	resource	aws_cloudformation_stack	Ensure that CloudFormation stacks are sending event notifications to an SNS topic	Terraform
146	CKV_AWS_126	resource	aws_instance	Ensure that detailed monitoring is enabled for EC2 instances	Terraform
147	CKV_AWS_127	resource	aws_elb	Ensure that Elastic Load Balancer(s) uses SSL certificates provided by AWS Certificate Manager	Terraform
148	CKV_AWS_128	resource	aws_rds_cluster	Ensure that an Amazon RDS Clusters have AWS Identity and Access Management (IAM) authentication enabled	Terraform
149	CKV_AWS_129	resource	aws_db_instance	Ensure that respective logs of Amazon Relational Database Service (Amazon RDS) are enabled	Terraform
150	CKV_AWS_130	resource	aws_subnet	Ensure VPC subnets do not assign public IP by default	Terraform
151	CKV_AWS_131	resource	aws_lb	Ensure that ALB drops HTTP headers	Terraform
152	CKV_AWS_131	resource	aws_alb	Ensure that ALB drops HTTP headers	Terraform
153	CKV_AWS_133	resource	aws_rds_cluster	Ensure that RDS instances has backup policy	Terraform
154	CKV_AWS_134	resource	aws_elasticache_cluster	Ensure that Amazon ElastiCache Redis clusters have automatic backup turned on	Terraform
155	CKV_AWS_135	resource	aws_instance	Ensure that EC2 is EBS optimized	Terraform
156	CKV_AWS_136	resource	aws_ecr_repository	Ensure that ECR repositories are encrypted using KMS	Terraform
157	CKV_AWS_137	resource	aws_elasticsearch_domain	Ensure that Elasticsearch is configured inside a VPC	Terraform
158	CKV_AWS_138	resource	aws_elb	Ensure that ELB is cross-zone-load-balancing enabled	Terraform
159	CKV_AWS_139	resource	aws_rds_cluster	Ensure that RDS clusters have deletion protection enabled	Terraform
160	CKV_AWS_140	resource	aws_rds_global_cluster	Ensure that RDS global clusters are encrypted	Terraform
161	CKV_AWS_141	resource	aws_redshift_cluster	Ensured that redshift cluster allowing version upgrade by default	Terraform
162	CKV_AWS_142	resource	aws_redshift_cluster	Ensure that Redshift cluster is encrypted by KMS	Terraform
163	CKV_AWS_143	resource	aws_s3_bucket	Ensure that S3 bucket has lock configuration enabled by default	Terraform
164	CKV_AWS_144	resource	aws_s3_bucket	Ensure that S3 bucket has cross-region replication enabled	Terraform
165	CKV_AWS_145	resource	aws_s3_bucket	Ensure that S3 buckets are encrypted with KMS by default	Terraform
166	CKV_AWS_146	resource	aws_db_cluster_snapshot	Ensure that RDS database cluster snapshot is encrypted	Terraform
167	CKV_AWS_147	resource	aws_codebuild_project	Ensure that CodeBuild projects are encrypted	Terraform
168	CKV_AWS_148	resource	aws_default_vpc	Ensure no default VPC is planned to be provisioned	Terraform
169	CKV_AWS_149	resource	aws_secretsmanager_secret	Ensure that Secrets Manager secret is encrypted using KMS CMK	Terraform
170	CKV_AWS_150	resource	aws_lb	Ensure that Load Balancer has deletion protection enabled	Terraform
171	CKV_AWS_150	resource	aws_alb	Ensure that Load Balancer has deletion protection enabled	Terraform
172	CKV_AWS_152	resource	aws_lb	Ensure that Load Balancer (Network/Gateway) has cross-zone load balancing enabled	Terraform
173	CKV_AWS_152	resource	aws_alb	Ensure that Load Balancer (Network/Gateway) has cross-zone load balancing enabled	Terraform
174	CKV_AWS_153	resource	aws_autoscaling_group	Autoscaling groups should supply tags to launch configurations	Terraform
175	CKV_AWS_154	resource	aws_redshift_cluster	Ensure Redshift is not deployed outside of a VPC	Terraform
176	CKV_AWS_155	resource	aws_workspaces_workspace	Ensure that Workspace user volumes are encrypted	Terraform
177	CKV_AWS_156	resource	aws_workspaces_workspace	Ensure that Workspace root volumes are encrypted	Terraform
178	CKV_AWS_157	resource	aws_db_instance	Ensure that RDS instances have Multi-AZ enabled	Terraform
179	CKV_AWS_158	resource	aws_cloudwatch_log_group	Ensure that CloudWatch Log Group is encrypted by KMS	Terraform
180	CKV_AWS_159	resource	aws_athena_workgroup	Ensure that Athena Workgroup is encrypted	Terraform
181	CKV_AWS_160	resource	aws_timestreamwrite_database	Ensure that Timestream database is encrypted with KMS CMK	Terraform
182	CKV_AWS_161	resource	aws_db_instance	Ensure RDS database has IAM authentication enabled	Terraform
183	CKV_AWS_162	resource	aws_rds_cluster	Ensure RDS cluster has IAM authentication enabled	Terraform
184	CKV_AWS_163	resource	aws_ecr_repository	Ensure ECR image scanning on push is enabled	Terraform
185	CKV_AWS_164	resource	aws_transfer_server	Ensure Transfer Server is not exposed publicly.	Terraform
186	CKV_AWS_165	resource	aws_dynamodb_global_table	Ensure Dynamodb point in time recovery (backup) is enabled for global tables	Terraform
187	CKV_AWS_166	resource	aws_backup_vault	Ensure Backup Vault is encrypted at rest using KMS CMK	Terraform
188	CKV_AWS_167	resource	aws_glacier_vault	Ensure Glacier Vault access policy is not public by only allowing specific services or principals to access it	Terraform
189	CKV_AWS_168	resource	aws_sqs_queue_policy	Ensure SQS queue policy is not public by only allowing specific services or principals to access it	Terraform
190	CKV_AWS_169	resource	aws_sns_topic_policy	Ensure SNS topic policy is not public by only allowing specific services or principals to access it	Terraform
191	CKV_AWS_170	resource	aws_qldb_ledger	Ensure QLDB ledger permissions mode is set to STANDARD	Terraform
192	CKV_AWS_171	resource	aws_emr_security_configuration	Ensure Cluster security configuration encryption is using SSE-KMS	Terraform
193	CKV_AWS_172	resource	aws_qldb_ledger	Ensure QLDB ledger has deletion protection enabled	Terraform
194	CKV_AWS_173	resource	aws_lambda_function	Check encryption settings for Lambda environmental variable	Terraform
195	CKV2_AWS_1	resource	aws_subnet	Ensure that all NACL are attached to subnets	Terraform
196	CKV2_AWS_1	resource	aws_network_acl	Ensure that all NACL are attached to subnets	Terraform
197	CKV2_AWS_2	resource	aws_volume_attachment	Ensure that only encrypted EBS volumes are attached to EC2 instances	Terraform
198	CKV2_AWS_2	resource	aws_ebs_volume	Ensure that only encrypted EBS volumes are attached to EC2 instances	Terraform
199	CKV2_AWS_3	resource	aws_guardduty_organization_configuration	Ensure GuardDuty is enabled to specific org/region	Terraform
200	CKV2_AWS_3	resource	aws_guardduty_detector	Ensure GuardDuty is enabled to specific org/region	Terraform
201	CKV2_AWS_4	resource	aws_api_gateway_method_settings	Ensure API Gateway stage have logging level defined as appropriate	Terraform
202	CKV2_AWS_4	resource	aws_api_gateway_stage	Ensure API Gateway stage have logging level defined as appropriate	Terraform
203	CKV2_AWS_5	resource	aws_security_group	Ensure that Security Groups are attached to an other resource	Terraform
204	CKV2_AWS_6	resource	aws_s3_bucket_public_access_block	Ensure that S3 bucket has a Public Access block	Terraform
205	CKV2_AWS_6	resource	aws_s3_bucket	Ensure that S3 bucket has a Public Access block	Terraform
206	CKV2_AWS_7	resource	aws_security_group	Ensure that Amazon EMR clusters’ security groups are not open to the world	Terraform
207	CKV2_AWS_7	resource	aws_emr_cluster	Ensure that Amazon EMR clusters’ security groups are not open to the world	Terraform
208	CKV2_AWS_8	resource	aws_rds_cluster	Ensure that RDS clusters has backup plan of AWS Backup	Terraform
209	CKV2_AWS_9	resource	aws_backup_selection	Ensure that EBS are added in the backup plans of AWS Backup	Terraform
210	CKV2_AWS_10	resource	aws_cloudtrail	Ensure CloudTrail trails are integrated with CloudWatch Logs	Terraform
211	CKV2_AWS_11	resource	aws_vpc	Ensure VPC flow logging is enabled in all VPCs	Terraform
212	CKV2_AWS_12	resource	aws_default_security_group	Ensure the default security group of every VPC restricts all traffic	Terraform
213	CKV2_AWS_12	resource	aws_vpc	Ensure the default security group of every VPC restricts all traffic	Terraform
214	CKV2_AWS_13	resource	aws_redshift_cluster	Ensure that Redshift clusters has backup plan of AWS Backup	Terraform
215	CKV2_AWS_14	resource	aws_iam_group	Ensure that IAM groups includes at least one IAM user	Terraform
216	CKV2_AWS_14	resource	aws_iam_group_membership	Ensure that IAM groups includes at least one IAM user	Terraform
217	CKV2_AWS_15	resource	aws_autoscaling_group	Ensure that auto Scaling groups that are associated with a load balancer, are using Elastic Load Balancing health checks.	Terraform
218	CKV2_AWS_15	resource	aws_elb	Ensure that auto Scaling groups that are associated with a load balancer, are using Elastic Load Balancing health checks.	Terraform
219	CKV2_AWS_16	resource	aws_dynamodb_table	Ensure that Auto Scaling is enabled on your DynamoDB tables	Terraform
220	CKV2_AWS_16	resource	aws_appautoscaling_target	Ensure that Auto Scaling is enabled on your DynamoDB tables	Terraform
221	CKV2_AWS_18	resource	aws_backup_selection	Ensure that Elastic File System (Amazon EFS) file systems are added in the backup plans of AWS Backup	Terraform
222	CKV2_AWS_19	resource	aws_eip	Ensure that all EIP addresses allocated to a VPC are attached to EC2 instances	Terraform
223	CKV2_AWS_19	resource	aws_eip_association	Ensure that all EIP addresses allocated to a VPC are attached to EC2 instances	Terraform
224	CKV2_AWS_20	resource	aws_lb_listener	Ensure that ALB redirects HTTP requests into HTTPS ones	Terraform
225	CKV2_AWS_20	resource	aws_lb	Ensure that ALB redirects HTTP requests into HTTPS ones	Terraform
226	CKV2_AWS_21	resource	aws_iam_group_membership	Ensure that all IAM users are members of at least one IAM group.	Terraform
227	CKV2_AWS_22	resource	aws_iam_user	Ensure an IAM User does not have access to the console	Terraform
228	CKV2_AWS_23	resource	aws_route53_record	Route53 A Record has Attached Resource	Terraform
229	CKV2_AWS_27	resource	aws_rds_cluster	Ensure Postgres RDS as aws_rds_cluster has Query Logging enabled	Terraform
230	CKV2_AWS_27	resource	aws_rds_cluster_parameter_group	Ensure Postgres RDS as aws_rds_cluster has Query Logging enabled	Terraform
231	CKV2_AWS_28	resource	aws_lb	Ensure public facing ALB are protected by WAF	Terraform
232	CKV2_AWS_29	resource	aws_api_gateway_rest_api	Ensure public API gateway are protected by WAF	Terraform
233	CKV2_AWS_29	resource	aws_api_gateway_stage	Ensure public API gateway are protected by WAF	Terraform
234	CKV2_AWS_30	resource	aws_db_parameter_group	Ensure Postgres RDS as aws_db_instance has Query Logging enabled	Terraform
235	CKV2_AWS_30	resource	aws_db_instance	Ensure Postgres RDS as aws_db_instance has Query Logging enabled	Terraform
236	CKV_AZURE_1	resource	azurerm_virtual_machine	Ensure Azure Instance does not use basic authentication(Use SSH Key Instead)	Terraform
237	CKV_AZURE_1	resource	azurerm_linux_virtual_machine	Ensure Azure Instance does not use basic authentication(Use SSH Key Instead)	Terraform
238	CKV_AZURE_2	resource	azurerm_managed_disk	Ensure Azure managed disk has encryption enabled	Terraform
239	CKV_AZURE_3	resource	azurerm_storage_account	Ensure that ‘Secure transfer required’ is set to ‘Enabled’	Terraform
240	CKV_AZURE_4	resource	azurerm_kubernetes_cluster	Ensure AKS logging to Azure Monitoring is Configured	Terraform
241	CKV_AZURE_5	resource	azurerm_kubernetes_cluster	Ensure RBAC is enabled on AKS clusters	Terraform
242	CKV_AZURE_6	resource	azurerm_kubernetes_cluster	Ensure AKS has an API Server Authorized IP Ranges enabled	Terraform
243	CKV_AZURE_7	resource	azurerm_kubernetes_cluster	Ensure AKS cluster has Network Policy configured	Terraform
244	CKV_AZURE_8	resource	azurerm_kubernetes_cluster	Ensure Kube Dashboard is disabled	Terraform
245	CKV_AZURE_9	resource	azurerm_network_security_rule	Ensure that RDP access is restricted from the internet	Terraform
246	CKV_AZURE_9	resource	azurerm_network_security_group	Ensure that RDP access is restricted from the internet	Terraform
247	CKV_AZURE_10	resource	azurerm_network_security_rule	Ensure that SSH access is restricted from the internet	Terraform
248	CKV_AZURE_10	resource	azurerm_network_security_group	Ensure that SSH access is restricted from the internet	Terraform
249	CKV_AZURE_11	resource	azurerm_mariadb_firewall_rule	Ensure no SQL Databases allow ingress from 0.0.0.0/0 (ANY IP)	Terraform
250	CKV_AZURE_11	resource	azurerm_sql_firewall_rule	Ensure no SQL Databases allow ingress from 0.0.0.0/0 (ANY IP)	Terraform
251	CKV_AZURE_11	resource	azurerm_postgresql_firewall_rule	Ensure no SQL Databases allow ingress from 0.0.0.0/0 (ANY IP)	Terraform
252	CKV_AZURE_11	resource	azurerm_mysql_firewall_rule	Ensure no SQL Databases allow ingress from 0.0.0.0/0 (ANY IP)	Terraform
253	CKV_AZURE_12	resource	azurerm_network_watcher_flow_log	Ensure that Network Security Group Flow Log retention period is ‘greater than 90 days’	Terraform
254	CKV_AZURE_13	resource	azurerm_app_service	Ensure App Service Authentication is set on Azure App Service	Terraform
255	CKV_AZURE_14	resource	azurerm_app_service	Ensure web app redirects all HTTP traffic to HTTPS in Azure App Service	Terraform
256	CKV_AZURE_15	resource	azurerm_app_service	Ensure web app is using the latest version of TLS encryption	Terraform
257	CKV_AZURE_16	resource	azurerm_app_service	Ensure that Register with Azure Active Directory is enabled on App Service	Terraform
258	CKV_AZURE_17	resource	azurerm_app_service	Ensure the web app has ‘Client Certificates (Incoming client certificates)’ set	Terraform
259	CKV_AZURE_18	resource	azurerm_app_service	Ensure that ‘HTTP Version’ is the latest if used to run the web app	Terraform
260	CKV_AZURE_19	resource	azurerm_security_center_subscription_pricing	Ensure that standard pricing tier is selected	Terraform
261	CKV_AZURE_20	resource	azurerm_security_center_contact	Ensure that security contact ‘Phone number’ is set	Terraform
262	CKV_AZURE_21	resource	azurerm_security_center_contact	Ensure that ‘Send email notification for high severity alerts’ is set to ‘On’	Terraform
263	CKV_AZURE_22	resource	azurerm_security_center_contact	Ensure that ‘Send email notification for high severity alerts’ is set to ‘On’	Terraform
264	CKV_AZURE_23	resource	azurerm_sql_server	Ensure that ‘Auditing’ is set to ‘On’ for SQL servers	Terraform
265	CKV_AZURE_23	resource	azurerm_mssql_server	Ensure that ‘Auditing’ is set to ‘On’ for SQL servers	Terraform
266	CKV_AZURE_24	resource	azurerm_sql_server	Ensure that ‘Auditing’ Retention is ‘greater than 90 days’ for SQL servers	Terraform
267	CKV_AZURE_24	resource	azurerm_mssql_server	Ensure that ‘Auditing’ Retention is ‘greater than 90 days’ for SQL servers	Terraform
268	CKV_AZURE_25	resource	azurerm_mssql_server_security_alert_policy	Ensure that ‘Threat Detection types’ is set to ‘All’	Terraform
269	CKV_AZURE_26	resource	azurerm_mssql_server_security_alert_policy	Ensure that ‘Send Alerts To’ is enabled for MSSQL servers	Terraform
270	CKV_AZURE_27	resource	azurerm_mssql_server_security_alert_policy	Ensure that ‘Email service and co-administrators’ is ‘Enabled’ for MSSQL servers	Terraform
271	CKV_AZURE_28	resource	azurerm_mysql_server	Ensure ‘Enforce SSL connection’ is set to ‘ENABLED’ for MySQL Database Server	Terraform
272	CKV_AZURE_29	resource	azurerm_postgresql_server	Ensure ‘Enforce SSL connection’ is set to ‘ENABLED’ for PostgreSQL Database Server	Terraform
273	CKV_AZURE_30	resource	azurerm_postgresql_configuration	Ensure server parameter ‘log_checkpoints’ is set to ‘ON’ for PostgreSQL Database Server	Terraform
274	CKV_AZURE_31	resource	azurerm_postgresql_configuration	Ensure server parameter ‘log_connections’ is set to ‘ON’ for PostgreSQL Database Server	Terraform
275	CKV_AZURE_32	resource	azurerm_postgresql_configuration	Ensure server parameter ‘connection_throttling’ is set to ‘ON’ for PostgreSQL Database Server	Terraform
276	CKV_AZURE_33	resource	azurerm_storage_account	Ensure Storage logging is enabled for Queue service for read, write and delete requests	Terraform
277	CKV_AZURE_34	resource	azurerm_storage_container	Ensure that ‘Public access level’ is set to Private for blob containers	Terraform
278	CKV_AZURE_35	resource	azurerm_storage_account	Ensure default network access rule for Storage Accounts is set to deny	Terraform
279	CKV_AZURE_35	resource	azurerm_storage_account_network_rules	Ensure default network access rule for Storage Accounts is set to deny	Terraform
280	CKV_AZURE_36	resource	azurerm_storage_account	Ensure ‘Trusted Microsoft Services’ is enabled for Storage Account access	Terraform
281	CKV_AZURE_36	resource	azurerm_storage_account_network_rules	Ensure ‘Trusted Microsoft Services’ is enabled for Storage Account access	Terraform
282	CKV_AZURE_37	resource	azurerm_monitor_log_profile	Ensure that Activity Log Retention is set 365 days or greater	Terraform
283	CKV_AZURE_38	resource	azurerm_monitor_log_profile	Ensure audit profile captures all the activities	Terraform
284	CKV_AZURE_39	resource	azurerm_role_definition	Ensure that no custom subscription owner roles are created	Terraform
285	CKV_AZURE_40	resource	azurerm_key_vault_key	Ensure that the expiration date is set on all keys	Terraform
286	CKV_AZURE_41	resource	azurerm_key_vault_secret	Ensure that the expiration date is set on all secrets	Terraform
287	CKV_AZURE_42	resource	azurerm_key_vault	Ensure the key vault is recoverable	Terraform
288	CKV_AZURE_43	resource	azurerm_storage_account	Ensure the Storage Account naming rules	Terraform
289	CKV_AZURE_44	resource	azurerm_storage_account	Ensure Storage Account is using the latest version of TLS encryption	Terraform
290	CKV_AZURE_45	resource	azurerm_virtual_machine	Ensure that no sensitive credentials are exposed in VM custom_data	Terraform
291	CKV_AZURE_46	resource	azurerm_mssql_database_extended_auditing_policy	Specifies a retention period of less than 90 days.	Terraform
292	CKV_AZURE_47	resource	azurerm_mariadb_server	Ensure ‘Enforce SSL connection’ is set to ‘ENABLED’ for MariaDB servers	Terraform
293	CKV_AZURE_48	resource	azurerm_mariadb_server	Ensure ‘public network access enabled’ is set to ‘False’ for MariaDB servers	Terraform
294	CKV_AZURE_49	resource	azurerm_linux_virtual_machine_scale_set	Ensure Azure linux scale set does not use basic authentication(Use SSH Key Instead)	Terraform
295	CKV_AZURE_50	resource	azurerm_virtual_machine	Ensure Virtual Machine Extensions are not Installed	Terraform
296	CKV_AZURE_50	resource	azurerm_linux_virtual_machine	Ensure Virtual Machine Extensions are not Installed	Terraform
297	CKV_AZURE_52	resource	azurerm_mssql_server	Ensure MSSQL is using the latest version of TLS encryption	Terraform
298	CKV_AZURE_53	resource	azurerm_mysql_server	Ensure ‘public network access enabled’ is set to ‘False’ for mySQL servers	Terraform
299	CKV_AZURE_54	resource	azurerm_mysql_server	Ensure MySQL is using the latest version of TLS encryption	Terraform
300	CKV_AZURE_55	resource	azurerm_security_center_subscription_pricing	Ensure that Azure Defender is set to On for Servers	Terraform
301	CKV_AZURE_56	resource	azurerm_function_app	Ensure that function apps enables Authentication	Terraform
302	CKV_AZURE_57	resource	azurerm_app_service	Ensure that CORS disallows every resource to access app services	Terraform
303	CKV_AZURE_58	resource	azurerm_synapse_workspace	Ensure that Azure Synapse workspaces enables managed virtual networks	Terraform
304	CKV_AZURE_59	resource	azurerm_storage_account	Ensure that Storage accounts disallow public access	Terraform
305	CKV_AZURE_60	resource	azurerm_storage_account	Ensure that storage account enables secure transfer	Terraform
306	CKV_AZURE_61	resource	azurerm_security_center_subscription_pricing	Ensure that Azure Defender is set to On for App Service	Terraform
307	CKV_AZURE_62	resource	azurerm_function_app	Ensure function apps are not accessible from all regions	Terraform
308	CKV_AZURE_63	resource	azurerm_app_service	Ensure that App service enables HTTP logging	Terraform
309	CKV_AZURE_64	resource	azurerm_storage_sync	Ensure that Azure File Sync disables public network access	Terraform
310	CKV_AZURE_65	resource	azurerm_app_service	Ensure that App service enables detailed error messages	Terraform
311	CKV_AZURE_66	resource	azurerm_app_service	Ensure that App service enables failed request tracing	Terraform
312	CKV_AZURE_67	resource	azurerm_function_app	Ensure that ‘HTTP Version’ is the latest, if used to run the Function app	Terraform
313	CKV_AZURE_68	resource	azurerm_postgresql_server	Ensure that PostgreSQL server disables public network access	Terraform
314	CKV_AZURE_69	resource	azurerm_security_center_subscription_pricing	Ensure that Azure Defender is set to On for Azure SQL database servers	Terraform
315	CKV_AZURE_70	resource	azurerm_function_app	Ensure that Function apps is only accessible over HTTPS	Terraform
316	CKV_AZURE_71	resource	azurerm_app_service	Ensure that Managed identity provider is enabled for app services	Terraform
317	CKV_AZURE_72	resource	azurerm_app_service	Ensure that remote debugging is not enabled for app services	Terraform
318	CKV_AZURE_73	resource	azurerm_automation_variable_bool	Ensure that Automation account variables are encrypted	Terraform
319	CKV_AZURE_73	resource	azurerm_automation_variable_string	Ensure that Automation account variables are encrypted	Terraform
320	CKV_AZURE_73	resource	azurerm_automation_variable_int	Ensure that Automation account variables are encrypted	Terraform
321	CKV_AZURE_73	resource	azurerm_automation_variable_datetime	Ensure that Automation account variables are encrypted	Terraform
322	CKV_AZURE_74	resource	azurerm_kusto_cluster	Ensure that Azure Data Explorer uses disk encryption	Terraform
323	CKV_AZURE_75	resource	azurerm_kusto_cluster	Ensure that Azure Data Explorer uses double encryption	Terraform
324	CKV_AZURE_76	resource	azurerm_batch_account	Ensure that Azure Batch account uses key vault to encrypt data	Terraform
325	CKV_AZURE_77	resource	azurerm_network_security_rule	Ensure that UDP Services are restricted from the Internet	Terraform
326	CKV_AZURE_77	resource	azurerm_network_security_group	Ensure that UDP Services are restricted from the Internet	Terraform
327	CKV_AZURE_78	resource	azurerm_app_service	Ensure FTP deployments are disabled	Terraform
328	CKV_AZURE_79	resource	azurerm_security_center_subscription_pricing	Ensure that Azure Defender is set to On for SQL servers on machines	Terraform
329	CKV_AZURE_80	resource	azurerm_app_service	Ensure that ‘Net Framework’ version is the latest, if used as a part of the web app	Terraform
330	CKV_AZURE_81	resource	azurerm_app_service	Ensure that ‘PHP version’ is the latest, if used to run the web app	Terraform
331	CKV_AZURE_82	resource	azurerm_app_service	Ensure that ‘Python version’ is the latest, if used to run the web app	Terraform
332	CKV_AZURE_83	resource	azurerm_app_service	Ensure that ‘Java version’ is the latest, if used to run the web app	Terraform
333	CKV_AZURE_84	resource	azurerm_security_center_subscription_pricing	Ensure that Azure Defender is set to On for Storage	Terraform
334	CKV_AZURE_85	resource	azurerm_security_center_subscription_pricing	Ensure that Azure Defender is set to On for Kubernetes	Terraform
335	CKV_AZURE_86	resource	azurerm_security_center_subscription_pricing	Ensure that Azure Defender is set to On for Container Registries	Terraform
336	CKV_AZURE_87	resource	azurerm_security_center_subscription_pricing	Ensure that Azure Defender is set to On for Key Vault	Terraform
337	CKV_AZURE_88	resource	azurerm_app_service	Ensure that app services use Azure Files	Terraform
338	CKV_AZURE_89	resource	azurerm_redis_cache	Ensure that Azure Cache for Redis disables public network access	Terraform
339	CKV_AZURE_90	resource	azurerm_mysql_server	Ensure that MySQL server disables public network access	Terraform
340	CKV_AZURE_91	resource	azurerm_redis_cache	Ensure that only SSL are enabled for Cache for Redis	Terraform
341	CKV_AZURE_92	resource	azurerm_linux_virtual_machine	Ensure that Virtual Machines use managed disks	Terraform
342	CKV_AZURE_92	resource	azurerm_windows_virtual_machine	Ensure that Virtual Machines use managed disks	Terraform
343	CKV_AZURE_93	resource	azurerm_managed_disk	Ensure that managed disks use a specific set of disk encryption sets for the customer-managed key encryption	Terraform
344	CKV_AZURE_94	resource	azurerm_mysql_server	Ensure that My SQL server enables geo-redundant backups	Terraform
345	CKV_AZURE_95	resource	azurerm_virtual_machine_scale_set	Ensure that automatic OS image patching is enabled for Virtual Machine Scale Sets	Terraform
346	CKV_AZURE_96	resource	azurerm_mysql_server	Ensure that MySQL server enables infrastructure encryption	Terraform
347	CKV_AZURE_97	resource	azurerm_linux_virtual_machine_scale_set	Ensure that Virtual machine scale sets have encryption at host enabled	Terraform
348	CKV_AZURE_97	resource	azurerm_windows_virtual_machine_scale_set	Ensure that Virtual machine scale sets have encryption at host enabled	Terraform
349	CKV_AZURE_98	resource	azurerm_container_group	Ensure that Azure Container group is deployed into virtual network	Terraform
350	CKV_AZURE_99	resource	azurerm_cosmosdb_account	Ensure Cosmos DB accounts have restricted access	Terraform
351	CKV_AZURE_100	resource	azurerm_cosmosdb_account	Ensure that Cosmos DB accounts have customer-managed keys to encrypt data at rest	Terraform
352	CKV_AZURE_101	resource	azurerm_cosmosdb_account	Ensure that Azure Cosmos DB disables public network access	Terraform
353	CKV_AZURE_102	resource	azurerm_postgresql_server	Ensure that PostgreSQL server enables geo-redundant backups	Terraform
354	CKV_AZURE_103	resource	azurerm_data_factory	Ensure that Azure Data Factory uses Git repository for source control	Terraform
355	CKV_AZURE_104	resource	azurerm_data_factory	Ensure that Azure Data factory public network access is disabled	Terraform
356	CKV_AZURE_105	resource	azurerm_data_lake_store	Ensure that Data Lake Store accounts enables encryption	Terraform
357	CKV_AZURE_106	resource	azurerm_eventgrid_domain	Ensure that Azure Event Grid Domain public network access is disabled	Terraform
358	CKV_AZURE_107	resource	azurerm_api_management	Ensure that API management services use virtual networks	Terraform
359	CKV_AZURE_108	resource	azurerm_iothub	Ensure that Azure IoT Hub disables public network access	Terraform
360	CKV_AZURE_109	resource	azurerm_key_vault	Ensure that key vault allows firewall rules settings	Terraform
361	CKV_AZURE_110	resource	azurerm_key_vault	Ensure that key vault enables purge protection	Terraform
362	CKV_AZURE_111	resource	azurerm_key_vault	Ensure that key vault enables soft delete	Terraform
363	CKV_AZURE_112	resource	azurerm_key_vault_key	Ensure that key vault key is backed by HSM	Terraform
364	CKV_AZURE_113	resource	azurerm_mssql_server	Ensure that SQL server disables public network access	Terraform
365	CKV_AZURE_114	resource	azurerm_key_vault_secret	Ensure that key vault secrets have “content_type” set	Terraform
366	CKV_AZURE_115	resource	azurerm_kubernetes_cluster	Ensure that AKS enables private clusters	Terraform
367	CKV_AZURE_116	resource	azurerm_kubernetes_cluster	Ensure that AKS uses Azure Policies Add-on	Terraform
368	CKV_AZURE_117	resource	azurerm_kubernetes_cluster	Ensure that AKS uses disk encryption set	Terraform
369	CKV_AZURE_118	resource	azurerm_network_interface	Ensure that Network Interfaces disable IP forwarding	Terraform
370	CKV_AZURE_119	resource	azurerm_network_interface	Ensure that Network Interfaces don’t use public IPs	Terraform
371	CKV_AZURE_120	resource	azurerm_application_gateway	Ensure that Application Gateway enables WAF	Terraform
372	CKV_AZURE_121	resource	azurerm_frontdoor	Ensure that Azure Front Door enables WAF	Terraform
373	CKV_AZURE_122	resource	azurerm_web_application_firewall_policy	Ensure that Application Gateway uses WAF in “Detection” or “Prevention” modes	Terraform
374	CKV_AZURE_123	resource	azurerm_frontdoor_firewall_policy	Ensure that Azure Front Door uses WAF in “Detection” or “Prevention” modes	Terraform
375	CKV_AZURE_124	resource	azurerm_search_service	Ensure that Azure Cognitive Search disables public network access	Terraform
376	CKV_AZURE_125	resource	azurerm_service_fabric_cluster	Ensures that Service Fabric use three levels of protection available	Terraform
377	CKV_AZURE_126	resource	azurerm_service_fabric_cluster	Ensures that Active Directory is used for authentication for Service Fabric	Terraform
378	CKV_AZURE_127	resource	azurerm_mysql_server	Ensure that My SQL server enables Threat detection policy	Terraform
379	CKV_AZURE_128	resource	azurerm_postgresql_server	Ensure that PostgreSQL server enables Threat detection policy	Terraform
380	CKV_AZURE_129	resource	azurerm_mariadb_server	Ensure that MariaDB server enables geo-redundant backups	Terraform
381	CKV_AZURE_130	resource	azurerm_postgresql_server	Ensure that PostgreSQL server enables infrastructure encryption	Terraform
382	CKV_AZURE_131	resource	azurerm_security_center_contact	Ensure that ‘Security contact emails’ is set	Terraform
383	CKV_AZURE_132	resource	azurerm_cosmosdb_account	Ensure cosmosdb does not allow privileged escalation by restricting management plane changes	Terraform
384	CKV2_AZURE_1	resource	azurerm_storage_account	Ensure storage for critical data are encrypted with Customer Managed Key	Terraform
385	CKV2_AZURE_2	resource	azurerm_sql_server	Ensure that Vulnerability Assessment (VA) is enabled on a SQL server by setting a Storage Account	Terraform
386	CKV2_AZURE_2	resource	azurerm_mssql_server_security_alert_policy	Ensure that Vulnerability Assessment (VA) is enabled on a SQL server by setting a Storage Account	Terraform
387	CKV2_AZURE_3	resource	azurerm_sql_server	Ensure that VA setting Periodic Recurring Scans is enabled on a SQL server	Terraform
388	CKV2_AZURE_3	resource	azurerm_mssql_server_security_alert_policy	Ensure that VA setting Periodic Recurring Scans is enabled on a SQL server	Terraform
389	CKV2_AZURE_3	resource	azurerm_mssql_server_vulnerability_assessment	Ensure that VA setting Periodic Recurring Scans is enabled on a SQL server	Terraform
390	CKV2_AZURE_3	resource	azurerm_mssql_server	Ensure that VA setting Periodic Recurring Scans is enabled on a SQL server	Terraform
391	CKV2_AZURE_4	resource	azurerm_sql_server	Ensure Azure SQL server ADS VA Send scan reports to is configured	Terraform
392	CKV2_AZURE_4	resource	azurerm_mssql_server_security_alert_policy	Ensure Azure SQL server ADS VA Send scan reports to is configured	Terraform
393	CKV2_AZURE_4	resource	azurerm_mssql_server_vulnerability_assessment	Ensure Azure SQL server ADS VA Send scan reports to is configured	Terraform
394	CKV2_AZURE_4	resource	azurerm_mssql_server	Ensure Azure SQL server ADS VA Send scan reports to is configured	Terraform
395	CKV2_AZURE_5	resource	azurerm_sql_server	Ensure that VA setting ‘Also send email notifications to admins and subscription owners’ is set for a SQL server	Terraform
396	CKV2_AZURE_5	resource	azurerm_mssql_server_security_alert_policy	Ensure that VA setting ‘Also send email notifications to admins and subscription owners’ is set for a SQL server	Terraform
397	CKV2_AZURE_5	resource	azurerm_mssql_server_vulnerability_assessment	Ensure that VA setting ‘Also send email notifications to admins and subscription owners’ is set for a SQL server	Terraform
398	CKV2_AZURE_5	resource	azurerm_mssql_server	Ensure that VA setting ‘Also send email notifications to admins and subscription owners’ is set for a SQL server	Terraform
399	CKV2_AZURE_6	resource	azurerm_sql_firewall_rule	Ensure ‘Allow access to Azure services’ for PostgreSQL Database Server is disabled	Terraform
400	CKV2_AZURE_6	resource	azurerm_sql_server	Ensure ‘Allow access to Azure services’ for PostgreSQL Database Server is disabled	Terraform
401	CKV2_AZURE_7	resource	azurerm_sql_server	Ensure that Azure Active Directory Admin is configured	Terraform
402	CKV2_AZURE_8	resource	azurerm_storage_container	Ensure the storage container storing the activity logs is not publicly accessible	Terraform
403	CKV2_AZURE_8	resource	azurerm_monitor_activity_log_alert	Ensure the storage container storing the activity logs is not publicly accessible	Terraform
404	CKV2_AZURE_9	resource	azurerm_virtual_machine	Ensure Virtual Machines are utilizing Managed Disks	Terraform
405	CKV2_AZURE_10	resource	azurerm_virtual_machine	Ensure that Microsoft Antimalware is configured to automatically updates for Virtual Machines	Terraform
406	CKV2_AZURE_10	resource	azurerm_virtual_machine_extension	Ensure that Microsoft Antimalware is configured to automatically updates for Virtual Machines	Terraform
407	CKV2_AZURE_11	resource	azurerm_kusto_cluster	Ensure that Azure Data Explorer encryption at rest uses a customer-managed key	Terraform
408	CKV2_AZURE_12	resource	azurerm_virtual_machine	Ensure that virtual machines are backed up using Azure Backup	Terraform
409	CKV2_AZURE_13	resource	azurerm_sql_server	Ensure that sql servers enables data security policy	Terraform
410	CKV2_AZURE_13	resource	azurerm_mssql_server_security_alert_policy	Ensure that sql servers enables data security policy	Terraform
411	CKV2_AZURE_14	resource	azurerm_managed_disk	Ensure that Unattached disks are encrypted	Terraform
412	CKV2_AZURE_14	resource	azurerm_virtual_machine	Ensure that Unattached disks are encrypted	Terraform
413	CKV2_AZURE_15	resource	azurerm_data_factory	Ensure that Azure data factories are encrypted with a customer-managed key	Terraform
414	CKV2_AZURE_16	resource	azurerm_mysql_server	Ensure that MySQL server enables customer-managed key for encryption	Terraform
415	CKV2_AZURE_16	resource	azurerm_mysql_server_key	Ensure that MySQL server enables customer-managed key for encryption	Terraform
416	CKV2_AZURE_17	resource	azurerm_postgresql_server	Ensure that PostgreSQL server enables customer-managed key for encryption	Terraform
417	CKV2_AZURE_17	resource	azurerm_postgresql_server_key	Ensure that PostgreSQL server enables customer-managed key for encryption	Terraform
418	CKV2_AZURE_18	resource	azurerm_storage_account_customer_managed_key	Ensure that Storage Accounts use customer-managed key for encryption	Terraform
419	CKV2_AZURE_18	resource	azurerm_storage_account	Ensure that Storage Accounts use customer-managed key for encryption	Terraform
420	CKV2_AZURE_19	resource	azurerm_synapse_workspace	Ensure that Azure Synapse workspaces have no IP firewall rules attached	Terraform
421	CKV2_AZURE_20	resource	azurerm_storage_table	Ensure Storage logging is enabled for Table service for read requests	Terraform
422	CKV2_AZURE_20	resource	azurerm_log_analytics_storage_insights	Ensure Storage logging is enabled for Table service for read requests	Terraform
423	CKV2_AZURE_20	resource	azurerm_storage_account	Ensure Storage logging is enabled for Table service for read requests	Terraform
424	CKV2_AZURE_21	resource	azurerm_log_analytics_storage_insights	Ensure Storage logging is enabled for Blob service for read requests	Terraform
425	CKV2_AZURE_21	resource	azurerm_storage_container	Ensure Storage logging is enabled for Blob service for read requests	Terraform
426	CKV2_AZURE_21	resource	azurerm_storage_account	Ensure Storage logging is enabled for Blob service for read requests	Terraform
427	CKV2_AZURE_22	resource	azurerm_network_interface	Ensure that Network Interfaces don’t use public IPs	Terraform
428	CKV_BCW_1	provider	bridgecrew	Ensure no hard coded API token exist in the provider	Terraform
429	CKV_GCP_1	resource	google_container_cluster	Ensure Stackdriver Logging is set to Enabled on Kubernetes Engine Clusters	Terraform
430	CKV_GCP_2	resource	google_compute_firewall	Ensure Google compute firewall ingress does not allow unrestricted ssh access	Terraform
431	CKV_GCP_3	resource	google_compute_firewall	Ensure Google compute firewall ingress does not allow unrestricted rdp access	Terraform
432	CKV_GCP_4	resource	google_compute_ssl_policy	Ensure no HTTPS or SSL proxy load balancers permit SSL policies with weak cipher suites	Terraform
433	CKV_GCP_6	resource	google_sql_database_instance	Ensure all Cloud SQL database instance requires all incoming connections to use SSL	Terraform
434	CKV_GCP_7	resource	google_container_cluster	Ensure Legacy Authorization is set to Disabled on Kubernetes Engine Clusters	Terraform
435	CKV_GCP_8	resource	google_container_cluster	Ensure Stackdriver Monitoring is set to Enabled on Kubernetes Engine Clusters	Terraform
436	CKV_GCP_9	resource	google_container_node_pool	Ensure ‘Automatic node repair’ is enabled for Kubernetes Clusters	Terraform
437	CKV_GCP_10	resource	google_container_node_pool	Ensure ‘Automatic node upgrade’ is enabled for Kubernetes Clusters	Terraform
438	CKV_GCP_11	resource	google_sql_database_instance	Ensure that Cloud SQL database Instances are not open to the world	Terraform
439	CKV_GCP_12	resource	google_container_cluster	Ensure Network Policy is enabled on Kubernetes Engine Clusters	Terraform
440	CKV_GCP_13	resource	google_container_cluster	Ensure a client certificate is used by clients to authenticate to Kubernetes Engine Clusters	Terraform
441	CKV_GCP_14	resource	google_sql_database_instance	Ensure all Cloud SQL database instance have backup configuration enabled	Terraform
442	CKV_GCP_15	resource	google_bigquery_dataset	Ensure that BigQuery datasets are not anonymously or publicly accessible	Terraform
443	CKV_GCP_16	resource	google_dns_managed_zone	Ensure that DNSSEC is enabled for Cloud DNS	Terraform
444	CKV_GCP_17	resource	google_dns_managed_zone	Ensure that RSASHA1 is not used for the zone-signing and key-signing keys in Cloud DNS DNSSEC	Terraform
445	CKV_GCP_18	resource	google_container_cluster	Ensure GKE Control Plane is not public	Terraform
446	CKV_GCP_19	resource	google_container_cluster	Ensure GKE basic auth is disabled	Terraform
447	CKV_GCP_20	resource	google_container_cluster	Ensure master authorized networks is set to enabled in GKE clusters	Terraform
448	CKV_GCP_21	resource	google_container_cluster	Ensure Kubernetes Clusters are configured with Labels	Terraform
449	CKV_GCP_22	resource	google_container_node_pool	Ensure Container-Optimized OS (cos) is used for Kubernetes Engine Clusters Node image	Terraform
450	CKV_GCP_23	resource	google_container_cluster	Ensure Kubernetes Cluster is created with Alias IP ranges enabled	Terraform
451	CKV_GCP_24	resource	google_container_cluster	Ensure PodSecurityPolicy controller is enabled on the Kubernetes Engine Clusters	Terraform
452	CKV_GCP_25	resource	google_container_cluster	Ensure Kubernetes Cluster is created with Private cluster enabled	Terraform
453	CKV_GCP_26	resource	google_compute_subnetwork	Ensure that VPC Flow Logs is enabled for every subnet in a VPC Network	Terraform
454	CKV_GCP_27	resource	google_project	Ensure that the default network does not exist in a project	Terraform
455	CKV_GCP_28	resource	google_storage_bucket_iam_member	Ensure that Cloud Storage bucket is not anonymously or publicly accessible	Terraform
456	CKV_GCP_28	resource	google_storage_bucket_iam_binding	Ensure that Cloud Storage bucket is not anonymously or publicly accessible	Terraform
457	CKV_GCP_29	resource	google_storage_bucket	Ensure that Cloud Storage buckets have uniform bucket-level access enabled	Terraform
458	CKV_GCP_30	resource	google_compute_instance	Ensure that instances are not configured to use the default service account	Terraform
459	CKV_GCP_31	resource	google_compute_instance	Ensure that instances are not configured to use the default service account with full access to all Cloud APIs	Terraform
460	CKV_GCP_32	resource	google_compute_instance	Ensure ‘Block Project-wide SSH keys’ is enabled for VM instances	Terraform
461	CKV_GCP_33	resource	google_compute_project_metadata	Ensure oslogin is enabled for a Project	Terraform
462	CKV_GCP_34	resource	google_compute_instance	Ensure that no instance in the project overrides the project setting for enabling OSLogin(OSLogin needs to be enabled in project metadata for all instances)	Terraform
463	CKV_GCP_35	resource	google_compute_instance	Ensure ‘Enable connecting to serial ports’ is not enabled for VM Instance	Terraform
464	CKV_GCP_36	resource	google_compute_instance	Ensure that IP forwarding is not enabled on Instances	Terraform
465	CKV_GCP_37	resource	google_compute_disk	Ensure VM disks for critical VMs are encrypted with Customer Supplied Encryption Keys (CSEK)	Terraform
466	CKV_GCP_38	resource	google_compute_instance	Ensure VM disks for critical VMs are encrypted with Customer Supplied Encryption Keys (CSEK)	Terraform
467	CKV_GCP_39	resource	google_compute_instance	Ensure Compute instances are launched with Shielded VM enabled	Terraform
468	CKV_GCP_40	resource	google_compute_instance	Ensure that Compute instances do not have public IP addresses	Terraform
469	CKV_GCP_41	resource	google_project_iam_member	Ensure that IAM users are not assigned the Service Account User or Service Account Token Creator roles at project level	Terraform
470	CKV_GCP_41	resource	google_project_iam_binding	Ensure that IAM users are not assigned the Service Account User or Service Account Token Creator roles at project level	Terraform
471	CKV_GCP_42	resource	google_project_iam_member	Ensure that Service Account has no Admin privileges	Terraform
472	CKV_GCP_43	resource	google_kms_crypto_key	Ensure KMS encryption keys are rotated within a period of 90 days	Terraform
473	CKV_GCP_44	resource	google_folder_iam_member	Ensure no roles that enable to impersonate and manage all service accounts are used at a folder level	Terraform
474	CKV_GCP_44	resource	google_folder_iam_binding	Ensure no roles that enable to impersonate and manage all service accounts are used at a folder level	Terraform
475	CKV_GCP_45	resource	google_organization_iam_member	Ensure no roles that enable to impersonate and manage all service accounts are used at an organization level	Terraform
476	CKV_GCP_45	resource	google_organization_iam_binding	Ensure no roles that enable to impersonate and manage all service accounts are used at an organization level	Terraform
477	CKV_GCP_46	resource	google_project_iam_member	Ensure Default Service account is not used at a project level	Terraform
478	CKV_GCP_46	resource	google_project_iam_binding	Ensure Default Service account is not used at a project level	Terraform
479	CKV_GCP_47	resource	google_organization_iam_member	Ensure default service account is not used at an organization level	Terraform
480	CKV_GCP_47	resource	google_organization_iam_binding	Ensure default service account is not used at an organization level	Terraform
481	CKV_GCP_48	resource	google_folder_iam_member	Ensure Default Service account is not used at a folder level	Terraform
482	CKV_GCP_48	resource	google_folder_iam_binding	Ensure Default Service account is not used at a folder level	Terraform
483	CKV_GCP_49	resource	google_project_iam_member	Ensure no roles that enable to impersonate and manage all service accounts are used at a project level	Terraform
484	CKV_GCP_49	resource	google_project_iam_binding	Ensure no roles that enable to impersonate and manage all service accounts are used at a project level	Terraform
485	CKV_GCP_50	resource	google_sql_database_instance	Ensure MySQL database ‘local_infile’ flag is set to ‘off’	Terraform
486	CKV_GCP_51	resource	google_sql_database_instance	Ensure PostgreSQL database ‘log_checkpoints’ flag is set to ‘on’	Terraform
487	CKV_GCP_52	resource	google_sql_database_instance	Ensure PostgreSQL database ‘log_connections’ flag is set to ‘on’	Terraform
488	CKV_GCP_53	resource	google_sql_database_instance	Ensure PostgreSQL database ‘log_disconnections’ flag is set to ‘on’	Terraform
489	CKV_GCP_54	resource	google_sql_database_instance	Ensure PostgreSQL database ‘log_lock_waits’ flag is set to ‘on’	Terraform
490	CKV_GCP_55	resource	google_sql_database_instance	Ensure PostgreSQL database ‘log_min_messages’ flag is set to a valid value	Terraform
491	CKV_GCP_56	resource	google_sql_database_instance	Ensure PostgreSQL database ‘log_temp_files flag is set to ‘0’	Terraform
492	CKV_GCP_57	resource	google_sql_database_instance	Ensure PostgreSQL database ‘log_min_duration_statement’ flag is set to ‘-1’	Terraform
493	CKV_GCP_58	resource	google_sql_database_instance	Ensure SQL database ‘cross db ownership chaining’ flag is set to ‘off’	Terraform
494	CKV_GCP_59	resource	google_sql_database_instance	Ensure SQL database ‘contained database authentication’ flag is set to ‘off’	Terraform
495	CKV_GCP_60	resource	google_sql_database_instance	Ensure SQL database do not have public IP	Terraform
496	CKV_GCP_61	resource	google_container_cluster	Enable VPC Flow Logs and Intranode Visibility	Terraform
497	CKV_GCP_62	resource	google_storage_bucket	Bucket should log access	Terraform
498	CKV_GCP_63	resource	google_storage_bucket	Bucket should not log to itself	Terraform
499	CKV_GCP_64	resource	google_container_cluster	Ensure clusters are created with Private Nodes	Terraform
500	CKV_GCP_65	resource	google_container_cluster	Manage Kubernetes RBAC users with Google Groups for GKE	Terraform
501	CKV_GCP_66	resource	google_container_cluster	Ensure use of Binary Authorization	Terraform
502	CKV_GCP_67	resource	google_container_cluster	Ensure legacy Compute Engine instance metadata APIs are Disabled	Terraform
503	CKV_GCP_68	resource	google_container_cluster	Ensure Secure Boot for Shielded GKE Nodes is Enabled	Terraform
504	CKV_GCP_68	resource	google_container_node_pool	Ensure Secure Boot for Shielded GKE Nodes is Enabled	Terraform
505	CKV_GCP_69	resource	google_container_cluster	Ensure the GKE Metadata Server is Enabled	Terraform
506	CKV_GCP_69	resource	google_container_node_pool	Ensure the GKE Metadata Server is Enabled	Terraform
507	CKV_GCP_70	resource	google_container_cluster	Ensure the GKE Release Channel is set	Terraform
508	CKV_GCP_71	resource	google_container_cluster	Ensure Shielded GKE Nodes are Enabled	Terraform
509	CKV_GCP_72	resource	google_container_cluster	Ensure Integrity Monitoring for Shielded GKE Nodes is Enabled	Terraform
510	CKV_GCP_72	resource	google_container_node_pool	Ensure Integrity Monitoring for Shielded GKE Nodes is Enabled	Terraform
511	CKV2_GCP_1	resource	google_project_default_service_accounts	Ensure GKE clusters are not running using the Compute Engine default service account	Terraform
512	CKV2_GCP_2	resource	google_compute_network	Ensure legacy networks do not exist for a project	Terraform
513	CKV2_GCP_3	resource	google_os_login_ssh_public_key	Ensure that there are only GCP-managed service account keys for each service account	Terraform
514	CKV2_GCP_3	resource	google_endpoints_service	Ensure that there are only GCP-managed service account keys for each service account	Terraform
515	CKV2_GCP_3	resource	google_cloud_asset_folder_feed	Ensure that there are only GCP-managed service account keys for each service account	Terraform
516	CKV2_GCP_3	resource	google_storage_bucket_iam_binding	Ensure that there are only GCP-managed service account keys for each service account	Terraform
517	CKV2_GCP_3	resource	google_identity_platform_tenant_inbound_saml_config	Ensure that there are only GCP-managed service account keys for each service account	Terraform
518	CKV2_GCP_3	resource	google_compute_vpn_tunnel	Ensure that there are only GCP-managed service account keys for each service account	Terraform
519	CKV2_GCP_3	resource	google_kms_key_ring_iam	Ensure that there are only GCP-managed service account keys for each service account	Terraform
520	CKV2_GCP_3	resource	google_endpoints_service_iam	Ensure that there are only GCP-managed service account keys for each service account	Terraform
521	CKV2_GCP_3	resource	google_binary_authorization_attestor_iam	Ensure that there are only GCP-managed service account keys for each service account	Terraform
522	CKV2_GCP_3	resource	google_compute_http_health_check	Ensure that there are only GCP-managed service account keys for each service account	Terraform
523	CKV2_GCP_3	resource	google_compute_region_instance_group_manager	Ensure that there are only GCP-managed service account keys for each service account	Terraform
524	CKV2_GCP_3	resource	google_sql_database_instance	Ensure that there are only GCP-managed service account keys for each service account	Terraform
525	CKV2_GCP_3	resource	google_compute_route	Ensure that there are only GCP-managed service account keys for each service account	Terraform
526	CKV2_GCP_3	resource	google_iap_app_engine_version_iam	Ensure that there are only GCP-managed service account keys for each service account	Terraform
527	CKV2_GCP_3	resource	google_monitoring_service	Ensure that there are only GCP-managed service account keys for each service account	Terraform
528	CKV2_GCP_3	resource	google_compute_firewall	Ensure that there are only GCP-managed service account keys for each service account	Terraform
529	CKV2_GCP_3	resource	google_compute_target_ssl_proxy	Ensure that there are only GCP-managed service account keys for each service account	Terraform
530	CKV2_GCP_3	resource	google_bigtable_instance	Ensure that there are only GCP-managed service account keys for each service account	Terraform
531	CKV2_GCP_3	resource	google_dataproc_cluster	Ensure that there are only GCP-managed service account keys for each service account	Terraform
532	CKV2_GCP_3	resource	google_cloudiot_device	Ensure that there are only GCP-managed service account keys for each service account	Terraform
533	CKV2_GCP_3	resource	google_project_organization_policy	Ensure that there are only GCP-managed service account keys for each service account	Terraform
534	CKV2_GCP_3	resource	google_compute_instance	Ensure that there are only GCP-managed service account keys for each service account	Terraform
535	CKV2_GCP_3	resource	google_filestore_instance	Ensure that there are only GCP-managed service account keys for each service account	Terraform
536	CKV2_GCP_3	resource	google_cloud_tasks_queue	Ensure that there are only GCP-managed service account keys for each service account	Terraform
537	CKV2_GCP_3	resource	google_compute_backend_service_signed_url_key	Ensure that there are only GCP-managed service account keys for each service account	Terraform
538	CKV2_GCP_3	resource	google_secret_manager_secret	Ensure that there are only GCP-managed service account keys for each service account	Terraform
539	CKV2_GCP_3	resource	google_storage_default_object_acl	Ensure that there are only GCP-managed service account keys for each service account	Terraform
540	CKV2_GCP_3	resource	google_compute_network_endpoint	Ensure that there are only GCP-managed service account keys for each service account	Terraform
541	CKV2_GCP_3	resource	google_project_iam	Ensure that there are only GCP-managed service account keys for each service account	Terraform
542	CKV2_GCP_3	resource	google_logging_folder_bucket_config	Ensure that there are only GCP-managed service account keys for each service account	Terraform
543	CKV2_GCP_3	resource	google_composer_environment	Ensure that there are only GCP-managed service account keys for each service account	Terraform
544	CKV2_GCP_3	resource	google_folder	Ensure that there are only GCP-managed service account keys for each service account	Terraform
545	CKV2_GCP_3	resource	google_healthcare_dicom_store_iam	Ensure that there are only GCP-managed service account keys for each service account	Terraform
546	CKV2_GCP_3	resource	google_compute_health_check	Ensure that there are only GCP-managed service account keys for each service account	Terraform
547	CKV2_GCP_3	resource	google_healthcare_dataset	Ensure that there are only GCP-managed service account keys for each service account	Terraform
548	CKV2_GCP_3	resource	google_binary_authorization_policy	Ensure that there are only GCP-managed service account keys for each service account	Terraform
549	CKV2_GCP_3	resource	google_service_account_iam	Ensure that there are only GCP-managed service account keys for each service account	Terraform
550	CKV2_GCP_3	resource	google_logging_billing_account_sink	Ensure that there are only GCP-managed service account keys for each service account	Terraform
551	CKV2_GCP_3	resource	google_app_engine_standard_app_version	Ensure that there are only GCP-managed service account keys for each service account	Terraform
552	CKV2_GCP_3	resource	google_binary_authorization_attestor	Ensure that there are only GCP-managed service account keys for each service account	Terraform
553	CKV2_GCP_3	resource	google_compute_target_http_proxy	Ensure that there are only GCP-managed service account keys for each service account	Terraform
554	CKV2_GCP_3	resource	google_active_directory_domain	Ensure that there are only GCP-managed service account keys for each service account	Terraform
555	CKV2_GCP_3	resource	google_iap_brand	Ensure that there are only GCP-managed service account keys for each service account	Terraform
556	CKV2_GCP_3	resource	google_organization_policy	Ensure that there are only GCP-managed service account keys for each service account	Terraform
557	CKV2_GCP_3	resource	google_iap_web_backend_service_iam	Ensure that there are only GCP-managed service account keys for each service account	Terraform
558	CKV2_GCP_3	resource	google_scc_source	Ensure that there are only GCP-managed service account keys for each service account	Terraform
559	CKV2_GCP_3	resource	google_app_engine_domain_mapping	Ensure that there are only GCP-managed service account keys for each service account	Terraform
560	CKV2_GCP_3	resource	google_tpu_node	Ensure that there are only GCP-managed service account keys for each service account	Terraform
561	CKV2_GCP_3	resource	google_storage_object_access_control	Ensure that there are only GCP-managed service account keys for each service account	Terraform
562	CKV2_GCP_3	resource	google_compute_global_address	Ensure that there are only GCP-managed service account keys for each service account	Terraform
563	CKV2_GCP_3	resource	google_bigquery_data_transfer_config	Ensure that there are only GCP-managed service account keys for each service account	Terraform
564	CKV2_GCP_3	resource	google_logging_folder_sink	Ensure that there are only GCP-managed service account keys for each service account	Terraform
565	CKV2_GCP_3	resource	google_compute_router_interface	Ensure that there are only GCP-managed service account keys for each service account	Terraform
566	CKV2_GCP_3	resource	google_sourcerepo_repository	Ensure that there are only GCP-managed service account keys for each service account	Terraform
567	CKV2_GCP_3	resource	google_data_catalog_entry_group_iam	Ensure that there are only GCP-managed service account keys for each service account	Terraform
568	CKV2_GCP_3	resource	google_storage_bucket_object	Ensure that there are only GCP-managed service account keys for each service account	Terraform
569	CKV2_GCP_3	resource	google_deployment_manager_deployment	Ensure that there are only GCP-managed service account keys for each service account	Terraform
570	CKV2_GCP_3	resource	google_storage_bucket_iam_member	Ensure that there are only GCP-managed service account keys for each service account	Terraform
571	CKV2_GCP_3	resource	google_datastore_index	Ensure that there are only GCP-managed service account keys for each service account	Terraform
572	CKV2_GCP_3	resource	google_sql_source_representation_instance	Ensure that there are only GCP-managed service account keys for each service account	Terraform
573	CKV2_GCP_3	resource	google_compute_reservation	Ensure that there are only GCP-managed service account keys for each service account	Terraform
574	CKV2_GCP_3	resource	google_billing_account_iam_binding	Ensure that there are only GCP-managed service account keys for each service account	Terraform
575	CKV2_GCP_3	resource	google_bigtable_gc_policy	Ensure that there are only GCP-managed service account keys for each service account	Terraform
576	CKV2_GCP_3	resource	google_vpc_access_connector	Ensure that there are only GCP-managed service account keys for each service account	Terraform
577	CKV2_GCP_3	resource	google_monitoring_slo	Ensure that there are only GCP-managed service account keys for each service account	Terraform
578	CKV2_GCP_3	resource	google_pubsub_subscription_iam	Ensure that there are only GCP-managed service account keys for each service account	Terraform
579	CKV2_GCP_3	resource	google_compute_autoscaler	Ensure that there are only GCP-managed service account keys for each service account	Terraform
580	CKV2_GCP_3	resource	google_data_catalog_entry	Ensure that there are only GCP-managed service account keys for each service account	Terraform
581	CKV2_GCP_3	resource	google_healthcare_dicom_store	Ensure that there are only GCP-managed service account keys for each service account	Terraform
582	CKV2_GCP_3	resource	google_cloud_run_service	Ensure that there are only GCP-managed service account keys for each service account	Terraform
583	CKV2_GCP_3	resource	google_compute_region_autoscaler	Ensure that there are only GCP-managed service account keys for each service account	Terraform
584	CKV2_GCP_3	resource	google_storage_notification	Ensure that there are only GCP-managed service account keys for each service account	Terraform
585	CKV2_GCP_3	resource	google_cloud_asset_project_feed	Ensure that there are only GCP-managed service account keys for each service account	Terraform
586	CKV2_GCP_3	resource	google_compute_node_template	Ensure that there are only GCP-managed service account keys for each service account	Terraform
587	CKV2_GCP_3	resource	google_dataflow_job	Ensure that there are only GCP-managed service account keys for each service account	Terraform
588	CKV2_GCP_3	resource	google_runtimeconfig_variable	Ensure that there are only GCP-managed service account keys for each service account	Terraform
589	CKV2_GCP_3	resource	google_cloud_scheduler_job	Ensure that there are only GCP-managed service account keys for each service account	Terraform
590	CKV2_GCP_3	resource	google_identity_platform_tenant	Ensure that there are only GCP-managed service account keys for each service account	Terraform
591	CKV2_GCP_3	resource	google_compute_forwarding_rule	Ensure that there are only GCP-managed service account keys for each service account	Terraform
592	CKV2_GCP_3	resource	google_compute_region_disk_resource_policy_attachment	Ensure that there are only GCP-managed service account keys for each service account	Terraform
593	CKV2_GCP_3	resource	google_compute_disk_resource_policy_attachment	Ensure that there are only GCP-managed service account keys for each service account	Terraform
594	CKV2_GCP_3	resource	google_kms_secret_ciphertext	Ensure that there are only GCP-managed service account keys for each service account	Terraform
595	CKV2_GCP_3	resource	google_app_engine_service_split_traffic	Ensure that there are only GCP-managed service account keys for each service account	Terraform
596	CKV2_GCP_3	resource	google_sql_database	Ensure that there are only GCP-managed service account keys for each service account	Terraform
597	CKV2_GCP_3	resource	google_container_cluster	Ensure that there are only GCP-managed service account keys for each service account	Terraform
598	CKV2_GCP_3	resource	google_storage_default_object_access_control	Ensure that there are only GCP-managed service account keys for each service account	Terraform
599	CKV2_GCP_3	resource	google_iap_web_type_app_engine_iam	Ensure that there are only GCP-managed service account keys for each service account	Terraform
600	CKV2_GCP_3	resource	google_access_context_manager_service_perimeter	Ensure that there are only GCP-managed service account keys for each service account	Terraform
601	CKV2_GCP_3	resource	google_compute_disk	Ensure that there are only GCP-managed service account keys for each service account	Terraform
602	CKV2_GCP_3	resource	google_app_engine_application_url_dispatch_rules	Ensure that there are only GCP-managed service account keys for each service account	Terraform
603	CKV2_GCP_3	resource	google_dns_managed_zone	Ensure that there are only GCP-managed service account keys for each service account	Terraform
604	CKV2_GCP_3	resource	google_compute_instance_template	Ensure that there are only GCP-managed service account keys for each service account	Terraform
605	CKV2_GCP_3	resource	google_compute_backend_service	Ensure that there are only GCP-managed service account keys for each service account	Terraform
606	CKV2_GCP_3	resource	google_bigquery_dataset_access	Ensure that there are only GCP-managed service account keys for each service account	Terraform
607	CKV2_GCP_3	resource	google_compute_shared_vpc_service_project	Ensure that there are only GCP-managed service account keys for each service account	Terraform
608	CKV2_GCP_3	resource	google_compute_network	Ensure that there are only GCP-managed service account keys for each service account	Terraform
609	CKV2_GCP_3	resource	google_compute_node_group	Ensure that there are only GCP-managed service account keys for each service account	Terraform
610	CKV2_GCP_3	resource	google_compute_vpn_gateway	Ensure that there are only GCP-managed service account keys for each service account	Terraform
611	CKV2_GCP_3	resource	google_dataproc_autoscaling_policy	Ensure that there are only GCP-managed service account keys for each service account	Terraform
612	CKV2_GCP_3	resource	google_dialogflow_entity_type	Ensure that there are only GCP-managed service account keys for each service account	Terraform
613	CKV2_GCP_3	resource	google_compute_instance_group	Ensure that there are only GCP-managed service account keys for each service account	Terraform
614	CKV2_GCP_3	resource	google_monitoring_alert_policy	Ensure that there are only GCP-managed service account keys for each service account	Terraform
615	CKV2_GCP_3	resource	google_storage_object_acl	Ensure that there are only GCP-managed service account keys for each service account	Terraform
616	CKV2_GCP_3	resource	google_sql_ssl_cert	Ensure that there are only GCP-managed service account keys for each service account	Terraform
617	CKV2_GCP_3	resource	google_compute_project_default_network_tier	Ensure that there are only GCP-managed service account keys for each service account	Terraform
618	CKV2_GCP_3	resource	google_compute_region_backend_service	Ensure that there are only GCP-managed service account keys for each service account	Terraform
619	CKV2_GCP_3	resource	google_identity_platform_default_supported_idp_config	Ensure that there are only GCP-managed service account keys for each service account	Terraform
620	CKV2_GCP_3	resource	google_storage_bucket_iam	Ensure that there are only GCP-managed service account keys for each service account	Terraform
621	CKV2_GCP_3	resource	google_compute_target_https_proxy	Ensure that there are only GCP-managed service account keys for each service account	Terraform
622	CKV2_GCP_3	resource	google_compute_subnetwork	Ensure that there are only GCP-managed service account keys for each service account	Terraform
623	CKV2_GCP_3	resource	google_monitoring_metric_descriptor	Ensure that there are only GCP-managed service account keys for each service account	Terraform
624	CKV2_GCP_3	resource	google_compute_image	Ensure that there are only GCP-managed service account keys for each service account	Terraform
625	CKV2_GCP_3	resource	google_cloudfunctions_function	Ensure that there are only GCP-managed service account keys for each service account	Terraform
626	CKV2_GCP_3	resource	google_logging_organization_exclusion	Ensure that there are only GCP-managed service account keys for each service account	Terraform
627	CKV2_GCP_3	resource	google_container_registry	Ensure that there are only GCP-managed service account keys for each service account	Terraform
628	CKV2_GCP_3	resource	google_dns_record_set	Ensure that there are only GCP-managed service account keys for each service account	Terraform
629	CKV2_GCP_3	resource	google_compute_interconnect_attachment	Ensure that there are only GCP-managed service account keys for each service account	Terraform
630	CKV2_GCP_3	resource	google_data_catalog_entry_group	Ensure that there are only GCP-managed service account keys for each service account	Terraform
631	CKV2_GCP_3	resource	google_ml_engine_model	Ensure that there are only GCP-managed service account keys for each service account	Terraform
632	CKV2_GCP_3	resource	google_identity_platform_tenant_oauth_idp_config	Ensure that there are only GCP-managed service account keys for each service account	Terraform
633	CKV2_GCP_3	resource	google_pubsub_topic_iam	Ensure that there are only GCP-managed service account keys for each service account	Terraform
634	CKV2_GCP_3	resource	google_sql_user	Ensure that there are only GCP-managed service account keys for each service account	Terraform
635	CKV2_GCP_3	resource	google_dns_policy	Ensure that there are only GCP-managed service account keys for each service account	Terraform
636	CKV2_GCP_3	resource	google_project	Ensure that there are only GCP-managed service account keys for each service account	Terraform
637	CKV2_GCP_3	resource	google_dataproc_cluster_iam	Ensure that there are only GCP-managed service account keys for each service account	Terraform
638	CKV2_GCP_3	resource	google_dataproc_job_iam	Ensure that there are only GCP-managed service account keys for each service account	Terraform
639	CKV2_GCP_3	resource	google_iap_client	Ensure that there are only GCP-managed service account keys for each service account	Terraform
640	CKV2_GCP_3	resource	google_iap_tunnel_instance_iam	Ensure that there are only GCP-managed service account keys for each service account	Terraform
641	CKV2_GCP_3	resource	google_firestore_index	Ensure that there are only GCP-managed service account keys for each service account	Terraform
642	CKV2_GCP_3	resource	google_pubsub_subscription	Ensure that there are only GCP-managed service account keys for each service account	Terraform
643	CKV2_GCP_3	resource	google_identity_platform_tenant_default_supported_idp_config	Ensure that there are only GCP-managed service account keys for each service account	Terraform
644	CKV2_GCP_3	resource	google_cloudbuild_trigger	Ensure that there are only GCP-managed service account keys for each service account	Terraform
645	CKV2_GCP_3	resource	google_access_context_manager_service_perimeter_resource	Ensure that there are only GCP-managed service account keys for each service account	Terraform
646	CKV2_GCP_3	resource	google_organization_iam_policy	Ensure that there are only GCP-managed service account keys for each service account	Terraform
647	CKV2_GCP_3	resource	google_storage_bucket	Ensure that there are only GCP-managed service account keys for each service account	Terraform
648	CKV2_GCP_3	resource	google_data_catalog_tag	Ensure that there are only GCP-managed service account keys for each service account	Terraform
649	CKV2_GCP_3	resource	google_bigquery_dataset_iam	Ensure that there are only GCP-managed service account keys for each service account	Terraform
650	CKV2_GCP_3	resource	google_logging_project_exclusion	Ensure that there are only GCP-managed service account keys for each service account	Terraform
651	CKV2_GCP_3	resource	google_cloudiot_device_registry	Ensure that there are only GCP-managed service account keys for each service account	Terraform
652	CKV2_GCP_3	resource	google_kms_key_ring	Ensure that there are only GCP-managed service account keys for each service account	Terraform
653	CKV2_GCP_3	resource	google_project_iam_binding	Ensure that there are only GCP-managed service account keys for each service account	Terraform
654	CKV2_GCP_3	resource	google_bigquery_job	Ensure that there are only GCP-managed service account keys for each service account	Terraform
655	CKV2_GCP_3	resource	google_bigquery_table	Ensure that there are only GCP-managed service account keys for each service account	Terraform
656	CKV2_GCP_3	resource	google_cloud_asset_organization_feed	Ensure that there are only GCP-managed service account keys for each service account	Terraform
657	CKV2_GCP_3	resource	google_monitoring_uptime_check_config	Ensure that there are only GCP-managed service account keys for each service account	Terraform
658	CKV2_GCP_3	resource	google_bigtable_instance_iam	Ensure that there are only GCP-managed service account keys for each service account	Terraform
659	CKV2_GCP_3	resource	google_compute_network_peering_routes_config	Ensure that there are only GCP-managed service account keys for each service account	Terraform
660	CKV2_GCP_3	resource	google_service_networking_connection	Ensure that there are only GCP-managed service account keys for each service account	Terraform
661	CKV2_GCP_3	resource	google_bigquery_dataset	Ensure that there are only GCP-managed service account keys for each service account	Terraform
662	CKV2_GCP_3	resource	google_compute_router_bgp_peer	Ensure that there are only GCP-managed service account keys for each service account	Terraform
663	CKV2_GCP_3	resource	google_project_iam_member	Ensure that there are only GCP-managed service account keys for each service account	Terraform
664	CKV2_GCP_3	resource	google_compute_region_target_http_proxy	Ensure that there are only GCP-managed service account keys for each service account	Terraform
665	CKV2_GCP_3	resource	google_spanner_database	Ensure that there are only GCP-managed service account keys for each service account	Terraform
666	CKV2_GCP_3	resource	google_monitoring_dashboard	Ensure that there are only GCP-managed service account keys for each service account	Terraform
667	CKV2_GCP_3	resource	google_compute_backend_bucket	Ensure that there are only GCP-managed service account keys for each service account	Terraform
668	CKV2_GCP_3	resource	google_secret_manager_secret_version	Ensure that there are only GCP-managed service account keys for each service account	Terraform
669	CKV2_GCP_3	resource	google_logging_project_sink	Ensure that there are only GCP-managed service account keys for each service account	Terraform
670	CKV2_GCP_3	resource	google_network_management_connectivity_test_resource	Ensure that there are only GCP-managed service account keys for each service account	Terraform
671	CKV2_GCP_3	resource	google_compute_https_health_check	Ensure that there are only GCP-managed service account keys for each service account	Terraform
672	CKV2_GCP_3	resource	google_folder_iam_policy	Ensure that there are only GCP-managed service account keys for each service account	Terraform
673	CKV2_GCP_3	resource	google_compute_global_network_endpoint	Ensure that there are only GCP-managed service account keys for each service account	Terraform
674	CKV2_GCP_3	resource	google_spanner_instance	Ensure that there are only GCP-managed service account keys for each service account	Terraform
675	CKV2_GCP_3	resource	google_app_engine_firewall_rule	Ensure that there are only GCP-managed service account keys for each service account	Terraform
676	CKV2_GCP_3	resource	google_access_context_manager_access_policy	Ensure that there are only GCP-managed service account keys for each service account	Terraform
677	CKV2_GCP_3	resource	google_logging_project_bucket_config	Ensure that there are only GCP-managed service account keys for each service account	Terraform
678	CKV2_GCP_3	resource	google_folder_iam_binding	Ensure that there are only GCP-managed service account keys for each service account	Terraform
679	CKV2_GCP_3	resource	google_compute_global_network_endpoint_group	Ensure that there are only GCP-managed service account keys for each service account	Terraform
680	CKV2_GCP_3	resource	google_pubsub_topic	Ensure that there are only GCP-managed service account keys for each service account	Terraform
681	CKV2_GCP_3	resource	google_folder_iam_member	Ensure that there are only GCP-managed service account keys for each service account	Terraform
682	CKV2_GCP_3	resource	google_compute_security_policy	Ensure that there are only GCP-managed service account keys for each service account	Terraform
683	CKV2_GCP_3	resource	google_compute_instance_group_named_port	Ensure that there are only GCP-managed service account keys for each service account	Terraform
684	CKV2_GCP_3	resource	google_compute_backend_bucket_signed_url_key	Ensure that there are only GCP-managed service account keys for each service account	Terraform
685	CKV2_GCP_3	resource	google_compute_url_map	Ensure that there are only GCP-managed service account keys for each service account	Terraform
686	CKV2_GCP_3	resource	google_container_analysis_occurrence	Ensure that there are only GCP-managed service account keys for each service account	Terraform
687	CKV2_GCP_3	resource	google_runtimeconfig_config_iam	Ensure that there are only GCP-managed service account keys for each service account	Terraform
688	CKV2_GCP_3	resource	google_healthcare_hl7_v2_store_iam	Ensure that there are only GCP-managed service account keys for each service account	Terraform
689	CKV2_GCP_3	resource	google_organization_iam_member	Ensure that there are only GCP-managed service account keys for each service account	Terraform
690	CKV2_GCP_3	resource	google_runtimeconfig_config	Ensure that there are only GCP-managed service account keys for each service account	Terraform
691	CKV2_GCP_3	resource	google_container_analysis_note	Ensure that there are only GCP-managed service account keys for each service account	Terraform
692	CKV2_GCP_3	resource	google_compute_global_forwarding_rule	Ensure that there are only GCP-managed service account keys for each service account	Terraform
693	CKV2_GCP_3	resource	google_compute_instance_from_template	Ensure that there are only GCP-managed service account keys for each service account	Terraform
694	CKV2_GCP_3	resource	google_healthcare_fhir_store	Ensure that there are only GCP-managed service account keys for each service account	Terraform
695	CKV2_GCP_3	resource	google_identity_platform_oauth_idp_config	Ensure that there are only GCP-managed service account keys for each service account	Terraform
696	CKV2_GCP_3	resource	google_sourcerepo_repository_iam	Ensure that there are only GCP-managed service account keys for each service account	Terraform
697	CKV2_GCP_3	resource	google_compute_project_metadata_item	Ensure that there are only GCP-managed service account keys for each service account	Terraform
698	CKV2_GCP_3	resource	google_spanner_database_iam	Ensure that there are only GCP-managed service account keys for each service account	Terraform
699	CKV2_GCP_3	resource	google_compute_project_metadata	Ensure that there are only GCP-managed service account keys for each service account	Terraform
700	CKV2_GCP_3	resource	google_compute_region_target_https_proxy	Ensure that there are only GCP-managed service account keys for each service account	Terraform
701	CKV2_GCP_3	resource	google_access_context_manager_access_level	Ensure that there are only GCP-managed service account keys for each service account	Terraform
702	CKV2_GCP_3	resource	google_compute_region_health_check	Ensure that there are only GCP-managed service account keys for each service account	Terraform
703	CKV2_GCP_3	resource	google_compute_router	Ensure that there are only GCP-managed service account keys for each service account	Terraform
704	CKV2_GCP_3	resource	google_compute_address	Ensure that there are only GCP-managed service account keys for each service account	Terraform
705	CKV2_GCP_3	resource	google_compute_router_nat	Ensure that there are only GCP-managed service account keys for each service account	Terraform
706	CKV2_GCP_3	resource	google_dialogflow_agent	Ensure that there are only GCP-managed service account keys for each service account	Terraform
707	CKV2_GCP_3	resource	google_organization_iam_binding	Ensure that there are only GCP-managed service account keys for each service account	Terraform
708	CKV2_GCP_3	resource	google_healthcare_hl7_v2_store	Ensure that there are only GCP-managed service account keys for each service account	Terraform
709	CKV2_GCP_3	resource	google_compute_region_ssl_certificate	Ensure that there are only GCP-managed service account keys for each service account	Terraform
710	CKV2_GCP_3	resource	google_compute_instance_group_manager	Ensure that there are only GCP-managed service account keys for each service account	Terraform
711	CKV2_GCP_3	resource	google_compute_shared_vpc_host_project	Ensure that there are only GCP-managed service account keys for each service account	Terraform
712	CKV2_GCP_3	resource	google_iap_web_type_compute_iam	Ensure that there are only GCP-managed service account keys for each service account	Terraform
713	CKV2_GCP_3	resource	google_compute_ssl_policy	Ensure that there are only GCP-managed service account keys for each service account	Terraform
714	CKV2_GCP_3	resource	google_bigtable_table	Ensure that there are only GCP-managed service account keys for each service account	Terraform
715	CKV2_GCP_3	resource	google_healthcare_fhir_store_iam	Ensure that there are only GCP-managed service account keys for each service account	Terraform
716	CKV2_GCP_3	resource	google_data_catalog_tag_template	Ensure that there are only GCP-managed service account keys for each service account	Terraform
717	CKV2_GCP_3	resource	google_identity_platform_inbound_saml_config	Ensure that there are only GCP-managed service account keys for each service account	Terraform
718	CKV2_GCP_3	resource	google_usage_export_bucket	Ensure that there are only GCP-managed service account keys for each service account	Terraform
719	CKV2_GCP_3	resource	google_project_iam_custom_role	Ensure that there are only GCP-managed service account keys for each service account	Terraform
720	CKV2_GCP_3	resource	google_kms_crypto_key_iam	Ensure that there are only GCP-managed service account keys for each service account	Terraform
721	CKV2_GCP_3	resource	google_cloud_run_service_iam	Ensure that there are only GCP-managed service account keys for each service account	Terraform
722	CKV2_GCP_3	resource	google_compute_region_disk	Ensure that there are only GCP-managed service account keys for each service account	Terraform
723	CKV2_GCP_3	resource	google_compute_resource_policy	Ensure that there are only GCP-managed service account keys for each service account	Terraform
724	CKV2_GCP_3	resource	google_billing_account_iam_member	Ensure that there are only GCP-managed service account keys for each service account	Terraform
725	CKV2_GCP_3	resource	google_cloudfunctions_cloud_function_iam	Ensure that there are only GCP-managed service account keys for each service account	Terraform
726	CKV2_GCP_3	resource	google_organization_iam_custom_role	Ensure that there are only GCP-managed service account keys for each service account	Terraform
727	CKV2_GCP_3	resource	google_folder_organization_policy	Ensure that there are only GCP-managed service account keys for each service account	Terraform
728	CKV2_GCP_3	resource	google_compute_region_url_map	Ensure that there are only GCP-managed service account keys for each service account	Terraform
729	CKV2_GCP_3	resource	google_service_account_key	Ensure that there are only GCP-managed service account keys for each service account	Terraform
730	CKV2_GCP_3	resource	google_compute_network_endpoint_group	Ensure that there are only GCP-managed service account keys for each service account	Terraform
731	CKV2_GCP_3	resource	google_kms_key_ring_import_job	Ensure that there are only GCP-managed service account keys for each service account	Terraform
732	CKV2_GCP_3	resource	google_storage_hmac_key	Ensure that there are only GCP-managed service account keys for each service account	Terraform
733	CKV2_GCP_3	resource	google_compute_target_pool	Ensure that there are only GCP-managed service account keys for each service account	Terraform
734	CKV2_GCP_3	resource	google_compute_attached_disk	Ensure that there are only GCP-managed service account keys for each service account	Terraform
735	CKV2_GCP_3	resource	google_spanner_instance_iam	Ensure that there are only GCP-managed service account keys for each service account	Terraform
736	CKV2_GCP_3	resource	google_secret_manager_secret_iam	Ensure that there are only GCP-managed service account keys for each service account	Terraform
737	CKV2_GCP_3	resource	google_compute_snapshot	Ensure that there are only GCP-managed service account keys for each service account	Terraform
738	CKV2_GCP_3	resource	google_app_engine_flexible_app_version	Ensure that there are only GCP-managed service account keys for each service account	Terraform
739	CKV2_GCP_3	resource	google_container_node_pool	Ensure that there are only GCP-managed service account keys for each service account	Terraform
740	CKV2_GCP_3	resource	google_monitoring_notification_channel	Ensure that there are only GCP-managed service account keys for each service account	Terraform
741	CKV2_GCP_3	resource	google_logging_organization_bucket_config	Ensure that there are only GCP-managed service account keys for each service account	Terraform
742	CKV2_GCP_3	resource	google_dialogflow_intent	Ensure that there are only GCP-managed service account keys for each service account	Terraform
743	CKV2_GCP_3	resource	google_monitoring_group	Ensure that there are only GCP-managed service account keys for each service account	Terraform
744	CKV2_GCP_3	resource	google_healthcare_dataset_iam	Ensure that there are only GCP-managed service account keys for each service account	Terraform
745	CKV2_GCP_3	resource	google_compute_network_peering	Ensure that there are only GCP-managed service account keys for each service account	Terraform
746	CKV2_GCP_3	resource	google_storage_bucket_access_control	Ensure that there are only GCP-managed service account keys for each service account	Terraform
747	CKV2_GCP_3	resource	google_logging_organization_sink	Ensure that there are only GCP-managed service account keys for each service account	Terraform
748	CKV2_GCP_3	resource	google_compute_target_tcp_proxy	Ensure that there are only GCP-managed service account keys for each service account	Terraform
749	CKV2_GCP_3	resource	google_redis_instance	Ensure that there are only GCP-managed service account keys for each service account	Terraform
750	CKV2_GCP_3	resource	google_iap_web_iam	Ensure that there are only GCP-managed service account keys for each service account	Terraform
751	CKV2_GCP_3	resource	google_logging_billing_account_exclusion	Ensure that there are only GCP-managed service account keys for each service account	Terraform
752	CKV2_GCP_3	resource	google_kms_crypto_key	Ensure that there are only GCP-managed service account keys for each service account	Terraform
753	CKV2_GCP_3	resource	google_compute_instance_iam	Ensure that there are only GCP-managed service account keys for each service account	Terraform
754	CKV2_GCP_3	resource	google_project_service	Ensure that there are only GCP-managed service account keys for each service account	Terraform
755	CKV2_GCP_3	resource	google_service_account	Ensure that there are only GCP-managed service account keys for each service account	Terraform
756	CKV2_GCP_3	resource	google_logging_folder_exclusion	Ensure that there are only GCP-managed service account keys for each service account	Terraform
757	CKV2_GCP_3	resource	google_storage_transfer_job	Ensure that there are only GCP-managed service account keys for each service account	Terraform
758	CKV2_GCP_3	resource	google_folder_iam_audit_config	Ensure that there are only GCP-managed service account keys for each service account	Terraform
759	CKV2_GCP_3	resource	google_compute_ssl_certificate	Ensure that there are only GCP-managed service account keys for each service account	Terraform
760	CKV2_GCP_3	resource	google_billing_account_iam_policy	Ensure that there are only GCP-managed service account keys for each service account	Terraform
761	CKV2_GCP_3	resource	google_organization_iam_audit_config	Ensure that there are only GCP-managed service account keys for each service account	Terraform
762	CKV2_GCP_3	resource	google_logging_metric	Ensure that there are only GCP-managed service account keys for each service account	Terraform
763	CKV2_GCP_3	resource	google_dataproc_job	Ensure that there are only GCP-managed service account keys for each service account	Terraform
764	CKV2_GCP_3	resource	google_compute_subnetwork_iam	Ensure that there are only GCP-managed service account keys for each service account	Terraform
765	CKV2_GCP_3	resource	google_app_engine_application	Ensure that there are only GCP-managed service account keys for each service account	Terraform
766	CKV2_GCP_3	resource	google_cloud_run_domain_mapping	Ensure that there are only GCP-managed service account keys for each service account	Terraform
767	CKV2_GCP_3	resource	google_storage_bucket_acl	Ensure that there are only GCP-managed service account keys for each service account	Terraform
768	CKV2_GCP_3	resource	google_resource_manager_lien	Ensure that there are only GCP-managed service account keys for each service account	Terraform
769	CKV2_GCP_3	resource	google_bigtable_app_profile	Ensure that there are only GCP-managed service account keys for each service account	Terraform
770	CKV2_GCP_3	resource	google_compute_target_instance	Ensure that there are only GCP-managed service account keys for each service account	Terraform
771	CKV2_GCP_3	resource	google_dataflow_flex_template_job	Ensure that there are only GCP-managed service account keys for each service account	Terraform
772	CKV2_GCP_3	resource	google_logging_billing_account_bucket_config	Ensure that there are only GCP-managed service account keys for each service account	Terraform
773	CKV2_GCP_3	resource	google_iap_app_engine_service_iam	Ensure that there are only GCP-managed service account keys for each service account	Terraform
774	CKV2_GCP_3	resource	google_os_config_patch_deployment	Ensure that there are only GCP-managed service account keys for each service account	Terraform
775	CKV2_GCP_4	resource	google_logging_project_sink	Ensure that retention policies on log buckets are configured using Bucket Lock	Terraform
776	CKV2_GCP_4	resource	google_logging_organization_sink	Ensure that retention policies on log buckets are configured using Bucket Lock	Terraform
777	CKV2_GCP_4	resource	google_logging_folder_sink	Ensure that retention policies on log buckets are configured using Bucket Lock	Terraform
778	CKV2_GCP_4	resource	google_storage_bucket	Ensure that retention policies on log buckets are configured using Bucket Lock	Terraform
779	CKV2_GCP_5	resource	google_project_iam_audit_config	Ensure that Cloud Audit Logging is configured properly across all services and all users from a project	Terraform
780	CKV2_GCP_5	resource	google_project	Ensure that Cloud Audit Logging is configured properly across all services and all users from a project	Terraform
781	CKV2_GCP_6	resource	google_kms_crypto_key_iam_binding	Ensure that Cloud KMS cryptokeys are not anonymously or publicly accessible	Terraform
782	CKV2_GCP_6	resource	google_kms_crypto_key_iam_member	Ensure that Cloud KMS cryptokeys are not anonymously or publicly accessible	Terraform
783	CKV2_GCP_6	resource	google_kms_crypto_key	Ensure that Cloud KMS cryptokeys are not anonymously or publicly accessible	Terraform
784	CKV2_GCP_7	resource	google_sql_database_instance	Ensure that a MySQL database instance does not allow anyone to connect with administrative privileges	Terraform
785	CKV2_GCP_7	resource	google_sql_user	Ensure that a MySQL database instance does not allow anyone to connect with administrative privileges	Terraform
786	CKV_GIT_1	resource	github_repository	Ensure Repository is Private	Terraform
787	CKV_GIT_2	resource	github_repository_webhook	Ensure Repository Webhook uses secure Ssl	Terraform
788	CKV_LIN_1	provider	linode	Ensure no hard coded Linode tokens exist in provider	Terraform
789	CKV_LIN_2	resource	linode_instance	Ensure SSH key set in authorized_keys	Terraform
790	CKV_LIN_3	resource	linode_user	Ensure email is set	Terraform
791	CKV_LIN_4	resource	linode_user	Ensure email is set	Terraform
792	CKV_LIN_5	resource	linode_firewall	Ensure Inbound Firewall Policy is not set to ACCEPT	Terraform
793	CKV_LIN_6	resource	linode_firewall	Ensure Outbound Firewall Policy is not set to ACCEPT	Terraform

---