AWS MQBroker's minor version updates are disabled misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AWS_207
Category - Subcategory	Compute - Unsanctioned Resource Or Type
Provider	AWS
Severity	LOW
Framework	Terraform

Impact

When Amazon MQ supports a new version of a broker engine, you can upgrade your broker instances to the new version. There are two kinds of upgrades: major version upgrades and minor version upgrades. Minor upgrades helps maintain a secure and stable MQ broker with minimal impact on the application. For this reason, we recommend that your automatic minor upgrade is enabled. Minor version upgrades only occur automatically if a minor upgrade replaces an unsafe version, such as a minor upgrade that contains bug fixes for a previous version.

How to Fix

[source,go]

resource "aws_mq_broker" "example" { broker_name = "example" engine_type = "ActiveMQ" engine_version = "5.15.9" host_instance_type = "mq.t3.micro"

• auto_minor_version_upgrade = true }

---