AWS Codecommit is not associated with an approval rule misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC2_AWS_37
Category - Subcategory	Logging - Permissions
Provider	AWS
Severity	LOW
Framework	Terraform

Impact

Associating AWS Codecommit with an approval rule ensures that code changes are reviewed by other team members before being merged into the main branch of a repository. This can help identify problems or issues with the code before it is deployed, and can also serve as a means of knowledge sharing among team members.

How to Fix

[source,go]

resource "aws_codecommit_repository" "pass" { repository_name = "MyTestRepository" description = "This is the Sample App Repository" }

resource "aws_codecommit_approval_rule_template_association" "example" { approval_rule_template_name = aws_codecommit_approval_rule_template.example.name repository_name = aws_codecommit_repository.pass.repository_name }