
       _               _              
   ___| |__   ___  ___| | _______   __
  / __| '_ \ / _ \/ __| |/ / _ \ \ / /
 | (__| | | |  __/ (__|   < (_) \ V / 
  \___|_| |_|\___|\___|_|\_\___/ \_/  
                                      
By bridgecrew.io | version: 2.3.356 

terraform scan results:

Passed checks: 74, Failed checks: 57, Skipped checks: 0

Check: CKV_AWS_274: "Disallow IAM roles, users, and groups from using the AWS AdministratorAccess policy"
	PASSED for resource: aws_iam_role.dynamo_step_function_role
	File: /dynamo-migration.tf:7-68
Check: CKV_AWS_61: "Ensure AWS IAM policy does not allow assume role permission across all services"
	PASSED for resource: aws_iam_role.dynamo_step_function_role
	File: /dynamo-migration.tf:7-68
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-iam-policies/bc-aws-iam-45.html
Check: CKV_AWS_60: "Ensure IAM role allows only specific services or principals to assume it"
	PASSED for resource: aws_iam_role.dynamo_step_function_role
	File: /dynamo-migration.tf:7-68
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-iam-policies/bc-aws-iam-44.html
Check: CKV_AWS_274: "Disallow IAM roles, users, and groups from using the AWS AdministratorAccess policy"
	PASSED for resource: aws_iam_role.dynamo_configure_restore_role
	File: /dynamo-migration.tf:70-114
Check: CKV_AWS_61: "Ensure AWS IAM policy does not allow assume role permission across all services"
	PASSED for resource: aws_iam_role.dynamo_configure_restore_role
	File: /dynamo-migration.tf:70-114
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-iam-policies/bc-aws-iam-45.html
Check: CKV_AWS_60: "Ensure IAM role allows only specific services or principals to assume it"
	PASSED for resource: aws_iam_role.dynamo_configure_restore_role
	File: /dynamo-migration.tf:70-114
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-iam-policies/bc-aws-iam-44.html
Check: CKV_AWS_45: "Ensure no hard-coded secrets exist in lambda environment"
	PASSED for resource: aws_lambda_function.dynamo_configure_restore_lambda
	File: /dynamo-migration.tf:116-124
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/secrets-policies/bc-aws-secrets-3.html
Check: CKV_AWS_274: "Disallow IAM roles, users, and groups from using the AWS AdministratorAccess policy"
	PASSED for resource: aws_iam_role.elasticsearch_migration_lambda_role
	File: /elasticsearch-migration.tf:33-149
Check: CKV_AWS_61: "Ensure AWS IAM policy does not allow assume role permission across all services"
	PASSED for resource: aws_iam_role.elasticsearch_migration_lambda_role
	File: /elasticsearch-migration.tf:33-149
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-iam-policies/bc-aws-iam-45.html
Check: CKV_AWS_60: "Ensure IAM role allows only specific services or principals to assume it"
	PASSED for resource: aws_iam_role.elasticsearch_migration_lambda_role
	File: /elasticsearch-migration.tf:33-149
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-iam-policies/bc-aws-iam-44.html
Check: CKV_AWS_62: "Ensure IAM policies that allow full "*-*" administrative privileges are not created"
	PASSED for resource: aws_iam_role_policy.SourceClusterBucketAcessPolicy
	File: /elasticsearch-migration.tf:159-186
	Guide: https://docs.bridgecrew.io/docs/iam_47
Check: CKV_AWS_287: "Ensure IAM policies does not allow credentials exposure"
	PASSED for resource: aws_iam_role_policy.SourceClusterBucketAcessPolicy
	File: /elasticsearch-migration.tf:159-186
Check: CKV_AWS_288: "Ensure IAM policies does not allow data exfiltration"
	PASSED for resource: aws_iam_role_policy.SourceClusterBucketAcessPolicy
	File: /elasticsearch-migration.tf:159-186
Check: CKV_AWS_289: "Ensure IAM policies does not allow permissions management / resource exposure without constraints"
	PASSED for resource: aws_iam_role_policy.SourceClusterBucketAcessPolicy
	File: /elasticsearch-migration.tf:159-186
Check: CKV_AWS_286: "Ensure IAM policies does not allow privilege escalation"
	PASSED for resource: aws_iam_role_policy.SourceClusterBucketAcessPolicy
	File: /elasticsearch-migration.tf:159-186
Check: CKV_AWS_63: "Ensure no IAM policies documents allow "*" as a statement's actions"
	PASSED for resource: aws_iam_role_policy.SourceClusterBucketAcessPolicy
	File: /elasticsearch-migration.tf:159-186
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-iam-policies/iam-48.html
Check: CKV_AWS_355: "Ensure no IAM policies documents allow "*" as a statement's resource for restrictable actions"
	PASSED for resource: aws_iam_role_policy.SourceClusterBucketAcessPolicy
	File: /elasticsearch-migration.tf:159-186
Check: CKV_AWS_290: "Ensure IAM policies does not allow write access without constraints"
	PASSED for resource: aws_iam_role_policy.SourceClusterBucketAcessPolicy
	File: /elasticsearch-migration.tf:159-186
Check: CKV_AWS_45: "Ensure no hard-coded secrets exist in lambda environment"
	PASSED for resource: aws_lambda_function.elasticsearch_backup_lambda
	File: /elasticsearch-migration.tf:188-214
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/secrets-policies/bc-aws-secrets-3.html
Check: CKV_AWS_45: "Ensure no hard-coded secrets exist in lambda environment"
	PASSED for resource: aws_lambda_function.elasticsearch_backup_status_check_lambda
	File: /elasticsearch-migration.tf:216-242
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/secrets-policies/bc-aws-secrets-3.html
Check: CKV_AWS_45: "Ensure no hard-coded secrets exist in lambda environment"
	PASSED for resource: aws_lambda_function.elasticsearch_restore_lambda
	File: /elasticsearch-migration.tf:244-271
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/secrets-policies/bc-aws-secrets-3.html
Check: CKV_AWS_1: "Ensure IAM policies that allow full "*-*" administrative privileges are not created"
	PASSED for resource: aws_iam_policy_document.assume_role
	File: /elasticsearch-migration.tf:19-31
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-iam-policies/iam-23.html
Check: CKV_AWS_358: "Ensure GitHub Actions OIDC trust policies only allows actions from a specific known organization"
	PASSED for resource: aws_iam_policy_document.assume_role
	File: /elasticsearch-migration.tf:19-31
Check: CKV_AWS_107: "Ensure IAM policies does not allow credentials exposure"
	PASSED for resource: aws_iam_policy_document.assume_role
	File: /elasticsearch-migration.tf:19-31
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-iam-policies/ensure-iam-policies-do-not-allow-credentials-exposure.html
Check: CKV_AWS_108: "Ensure IAM policies does not allow data exfiltration"
	PASSED for resource: aws_iam_policy_document.assume_role
	File: /elasticsearch-migration.tf:19-31
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-iam-policies/ensure-iam-policies-do-not-allow-data-exfiltration.html
Check: CKV_AWS_109: "Ensure IAM policies does not allow permissions management / resource exposure without constraints"
	PASSED for resource: aws_iam_policy_document.assume_role
	File: /elasticsearch-migration.tf:19-31
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-iam-policies/ensure-iam-policies-do-not-allow-permissions-management-resource-exposure-without-constraint.html
Check: CKV_AWS_110: "Ensure IAM policies does not allow privilege escalation"
	PASSED for resource: aws_iam_policy_document.assume_role
	File: /elasticsearch-migration.tf:19-31
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-iam-policies/ensure-iam-policies-does-not-allow-privilege-escalation.html
Check: CKV_AWS_283: "Ensure no IAM policies documents allow ALL or any AWS principal permissions to the resource"
	PASSED for resource: aws_iam_policy_document.assume_role
	File: /elasticsearch-migration.tf:19-31
Check: CKV_AWS_111: "Ensure IAM policies does not allow write access without constraints"
	PASSED for resource: aws_iam_policy_document.assume_role
	File: /elasticsearch-migration.tf:19-31
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-iam-policies/ensure-iam-policies-do-not-allow-write-access-without-constraint.html
Check: CKV_AWS_356: "Ensure no IAM policies documents allow "*" as a statement's resource for restrictable actions"
	PASSED for resource: aws_iam_policy_document.assume_role
	File: /elasticsearch-migration.tf:19-31
Check: CKV_AWS_49: "Ensure no IAM policies documents allow "*" as a statement's actions"
	PASSED for resource: aws_iam_policy_document.assume_role
	File: /elasticsearch-migration.tf:19-31
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-iam-policies/bc-aws-iam-43.html
Check: CKV_AWS_93: "Ensure S3 bucket policy does not lockout all but root user. (Prevent lockouts needing root account fixes)"
	PASSED for resource: aws_s3_bucket.mongodb_backup_bucket
	File: /mongodb-migration.tf:13-16
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/s3-policies/bc-aws-s3-24.html
Check: CKV_AWS_274: "Disallow IAM roles, users, and groups from using the AWS AdministratorAccess policy"
	PASSED for resource: aws_iam_role.mongodb_migration_lambda_role
	File: /mongodb-migration.tf:32-147
Check: CKV_AWS_61: "Ensure AWS IAM policy does not allow assume role permission across all services"
	PASSED for resource: aws_iam_role.mongodb_migration_lambda_role
	File: /mongodb-migration.tf:32-147
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-iam-policies/bc-aws-iam-45.html
Check: CKV_AWS_60: "Ensure IAM role allows only specific services or principals to assume it"
	PASSED for resource: aws_iam_role.mongodb_migration_lambda_role
	File: /mongodb-migration.tf:32-147
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-iam-policies/bc-aws-iam-44.html
Check: CKV_AWS_45: "Ensure no hard-coded secrets exist in lambda environment"
	PASSED for resource: aws_lambda_function.mongodb_backup_lambda
	File: /mongodb-migration.tf:149-176
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/secrets-policies/bc-aws-secrets-3.html
Check: CKV_AWS_45: "Ensure no hard-coded secrets exist in lambda environment"
	PASSED for resource: aws_lambda_function.mongodb_restore_lambda
	File: /mongodb-migration.tf:178-209
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/secrets-policies/bc-aws-secrets-3.html
Check: CKV_AWS_1: "Ensure IAM policies that allow full "*-*" administrative privileges are not created"
	PASSED for resource: aws_iam_policy_document.assume_role_policy
	File: /mongodb-migration.tf:18-30
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-iam-policies/iam-23.html
Check: CKV_AWS_358: "Ensure GitHub Actions OIDC trust policies only allows actions from a specific known organization"
	PASSED for resource: aws_iam_policy_document.assume_role_policy
	File: /mongodb-migration.tf:18-30
Check: CKV_AWS_107: "Ensure IAM policies does not allow credentials exposure"
	PASSED for resource: aws_iam_policy_document.assume_role_policy
	File: /mongodb-migration.tf:18-30
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-iam-policies/ensure-iam-policies-do-not-allow-credentials-exposure.html
Check: CKV_AWS_108: "Ensure IAM policies does not allow data exfiltration"
	PASSED for resource: aws_iam_policy_document.assume_role_policy
	File: /mongodb-migration.tf:18-30
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-iam-policies/ensure-iam-policies-do-not-allow-data-exfiltration.html
Check: CKV_AWS_109: "Ensure IAM policies does not allow permissions management / resource exposure without constraints"
	PASSED for resource: aws_iam_policy_document.assume_role_policy
	File: /mongodb-migration.tf:18-30
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-iam-policies/ensure-iam-policies-do-not-allow-permissions-management-resource-exposure-without-constraint.html
Check: CKV_AWS_110: "Ensure IAM policies does not allow privilege escalation"
	PASSED for resource: aws_iam_policy_document.assume_role_policy
	File: /mongodb-migration.tf:18-30
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-iam-policies/ensure-iam-policies-does-not-allow-privilege-escalation.html
Check: CKV_AWS_283: "Ensure no IAM policies documents allow ALL or any AWS principal permissions to the resource"
	PASSED for resource: aws_iam_policy_document.assume_role_policy
	File: /mongodb-migration.tf:18-30
Check: CKV_AWS_111: "Ensure IAM policies does not allow write access without constraints"
	PASSED for resource: aws_iam_policy_document.assume_role_policy
	File: /mongodb-migration.tf:18-30
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-iam-policies/ensure-iam-policies-do-not-allow-write-access-without-constraint.html
Check: CKV_AWS_356: "Ensure no IAM policies documents allow "*" as a statement's resource for restrictable actions"
	PASSED for resource: aws_iam_policy_document.assume_role_policy
	File: /mongodb-migration.tf:18-30
Check: CKV_AWS_49: "Ensure no IAM policies documents allow "*" as a statement's actions"
	PASSED for resource: aws_iam_policy_document.assume_role_policy
	File: /mongodb-migration.tf:18-30
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-iam-policies/bc-aws-iam-43.html
Check: CKV_AWS_41: "Ensure no hard coded AWS access key and secret key exists in provider"
	PASSED for resource: aws.default
	File: /providers.tf:1-3
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/secrets-policies/bc-aws-secrets-5.html
Check: CKV_AWS_274: "Disallow IAM roles, users, and groups from using the AWS AdministratorAccess policy"
	PASSED for resource: aws_iam_role.get_entities_role
	File: /s3-migration.tf:10-77
Check: CKV_AWS_61: "Ensure AWS IAM policy does not allow assume role permission across all services"
	PASSED for resource: aws_iam_role.get_entities_role
	File: /s3-migration.tf:10-77
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-iam-policies/bc-aws-iam-45.html
Check: CKV_AWS_60: "Ensure IAM role allows only specific services or principals to assume it"
	PASSED for resource: aws_iam_role.get_entities_role
	File: /s3-migration.tf:10-77
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-iam-policies/bc-aws-iam-44.html
Check: CKV_AWS_274: "Disallow IAM roles, users, and groups from using the AWS AdministratorAccess policy"
	PASSED for resource: aws_iam_role.s3_replication_role
	File: /s3-migration.tf:79-174
Check: CKV_AWS_61: "Ensure AWS IAM policy does not allow assume role permission across all services"
	PASSED for resource: aws_iam_role.s3_replication_role
	File: /s3-migration.tf:79-174
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-iam-policies/bc-aws-iam-45.html
Check: CKV_AWS_60: "Ensure IAM role allows only specific services or principals to assume it"
	PASSED for resource: aws_iam_role.s3_replication_role
	File: /s3-migration.tf:79-174
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-iam-policies/bc-aws-iam-44.html
Check: CKV_AWS_274: "Disallow IAM roles, users, and groups from using the AWS AdministratorAccess policy"
	PASSED for resource: aws_iam_role.s3_step_function_role
	File: /s3-migration.tf:176-251
Check: CKV_AWS_61: "Ensure AWS IAM policy does not allow assume role permission across all services"
	PASSED for resource: aws_iam_role.s3_step_function_role
	File: /s3-migration.tf:176-251
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-iam-policies/bc-aws-iam-45.html
Check: CKV_AWS_60: "Ensure IAM role allows only specific services or principals to assume it"
	PASSED for resource: aws_iam_role.s3_step_function_role
	File: /s3-migration.tf:176-251
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-iam-policies/bc-aws-iam-44.html
Check: CKV_AWS_274: "Disallow IAM roles, users, and groups from using the AWS AdministratorAccess policy"
	PASSED for resource: aws_iam_role.create_batch_job_role
	File: /s3-migration.tf:253-336
Check: CKV_AWS_61: "Ensure AWS IAM policy does not allow assume role permission across all services"
	PASSED for resource: aws_iam_role.create_batch_job_role
	File: /s3-migration.tf:253-336
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-iam-policies/bc-aws-iam-45.html
Check: CKV_AWS_60: "Ensure IAM role allows only specific services or principals to assume it"
	PASSED for resource: aws_iam_role.create_batch_job_role
	File: /s3-migration.tf:253-336
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-iam-policies/bc-aws-iam-44.html
Check: CKV_AWS_45: "Ensure no hard-coded secrets exist in lambda environment"
	PASSED for resource: aws_lambda_function.get_source_dest_lambda
	File: /s3-migration.tf:339-348
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/secrets-policies/bc-aws-secrets-3.html
Check: CKV_AWS_93: "Ensure S3 bucket policy does not lockout all but root user. (Prevent lockouts needing root account fixes)"
	PASSED for resource: aws_s3_bucket.report_bucket
	File: /s3-migration.tf:351-354
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/s3-policies/bc-aws-s3-24.html
Check: CKV2_AWS_56: "Ensure AWS Managed IAMFullAccess IAM policy is not used."
	PASSED for resource: aws_iam_role.elasticsearch_migration_lambda_role
	File: /elasticsearch-migration.tf:33-149
Check: CKV2_AWS_56: "Ensure AWS Managed IAMFullAccess IAM policy is not used."
	PASSED for resource: aws_iam_role.mongodb_migration_lambda_role
	File: /mongodb-migration.tf:32-147
Check: CKV_AWS_19: "Ensure all data stored in the S3 bucket is securely encrypted at rest"
	PASSED for resource: aws_s3_bucket.mongodb_backup_bucket
	File: /mongodb-migration.tf:13-16
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/s3-policies/s3-14-data-encrypted-at-rest.html
Check: CKV_AWS_19: "Ensure all data stored in the S3 bucket is securely encrypted at rest"
	PASSED for resource: aws_s3_bucket.report_bucket
	File: /s3-migration.tf:351-354
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/s3-policies/s3-14-data-encrypted-at-rest.html
Check: CKV_AWS_21: "Ensure all data stored in the S3 bucket have versioning enabled"
	PASSED for resource: aws_s3_bucket.report_bucket
	File: /s3-migration.tf:351-354
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/s3-policies/s3-16-enable-versioning.html
Check: CKV_AWS_20: "S3 Bucket has an ACL defined which allows public READ access."
	PASSED for resource: aws_s3_bucket.mongodb_backup_bucket
	File: /mongodb-migration.tf:13-16
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/s3-policies/s3-1-acl-read-permissions-everyone.html
Check: CKV_AWS_20: "S3 Bucket has an ACL defined which allows public READ access."
	PASSED for resource: aws_s3_bucket.report_bucket
	File: /s3-migration.tf:351-354
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/s3-policies/s3-1-acl-read-permissions-everyone.html
Check: CKV_AWS_57: "S3 Bucket has an ACL defined which allows public WRITE access."
	PASSED for resource: aws_s3_bucket.mongodb_backup_bucket
	File: /mongodb-migration.tf:13-16
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/s3-policies/s3-2-acl-write-permissions-everyone.html
Check: CKV_AWS_57: "S3 Bucket has an ACL defined which allows public WRITE access."
	PASSED for resource: aws_s3_bucket.report_bucket
	File: /s3-migration.tf:351-354
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/s3-policies/s3-2-acl-write-permissions-everyone.html
Check: CKV2_AWS_40: "Ensure AWS IAM policy does not allow full IAM privileges"
	PASSED for resource: aws_iam_policy_document.assume_role
	File: /elasticsearch-migration.tf:19-31
Check: CKV2_AWS_40: "Ensure AWS IAM policy does not allow full IAM privileges"
	PASSED for resource: aws_iam_role_policy.SourceClusterBucketAcessPolicy
	File: /elasticsearch-migration.tf:159-186
Check: CKV2_AWS_40: "Ensure AWS IAM policy does not allow full IAM privileges"
	PASSED for resource: aws_iam_policy_document.assume_role_policy
	File: /mongodb-migration.tf:18-30
Check: CKV_AWS_272: "Ensure AWS Lambda function is configured to validate code-signing"
	FAILED for resource: aws_lambda_function.dynamo_configure_restore_lambda
	File: /dynamo-migration.tf:116-124

		116 | resource "aws_lambda_function" "dynamo_configure_restore_lambda" {
		117 |   filename      = "configure-restore.zip"
		118 |   function_name = local.dynamo_configure_restore_lambda_name
		119 |   role          = aws_iam_role.dynamo_configure_restore_role.arn
		120 |   timeout       = 300
		121 |   handler       = "main.lambda_handler"
		122 |   source_code_hash = data.archive_file.dynamo_backup_archive.output_base64sha256
		123 |   runtime = "python3.9"
		124 | }

Check: CKV_AWS_116: "Ensure that AWS Lambda function is configured for a Dead Letter Queue(DLQ)"
	FAILED for resource: aws_lambda_function.dynamo_configure_restore_lambda
	File: /dynamo-migration.tf:116-124
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-general-policies/ensure-that-aws-lambda-function-is-configured-for-a-dead-letter-queue-dlq.html

		116 | resource "aws_lambda_function" "dynamo_configure_restore_lambda" {
		117 |   filename      = "configure-restore.zip"
		118 |   function_name = local.dynamo_configure_restore_lambda_name
		119 |   role          = aws_iam_role.dynamo_configure_restore_role.arn
		120 |   timeout       = 300
		121 |   handler       = "main.lambda_handler"
		122 |   source_code_hash = data.archive_file.dynamo_backup_archive.output_base64sha256
		123 |   runtime = "python3.9"
		124 | }

Check: CKV_AWS_115: "Ensure that AWS Lambda function is configured for function-level concurrent execution limit"
	FAILED for resource: aws_lambda_function.dynamo_configure_restore_lambda
	File: /dynamo-migration.tf:116-124
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-general-policies/ensure-that-aws-lambda-function-is-configured-for-function-level-concurrent-execution-limit.html

		116 | resource "aws_lambda_function" "dynamo_configure_restore_lambda" {
		117 |   filename      = "configure-restore.zip"
		118 |   function_name = local.dynamo_configure_restore_lambda_name
		119 |   role          = aws_iam_role.dynamo_configure_restore_role.arn
		120 |   timeout       = 300
		121 |   handler       = "main.lambda_handler"
		122 |   source_code_hash = data.archive_file.dynamo_backup_archive.output_base64sha256
		123 |   runtime = "python3.9"
		124 | }

Check: CKV_AWS_117: "Ensure that AWS Lambda function is configured inside a VPC"
	FAILED for resource: aws_lambda_function.dynamo_configure_restore_lambda
	File: /dynamo-migration.tf:116-124
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-general-policies/ensure-that-aws-lambda-function-is-configured-inside-a-vpc-1.html

		116 | resource "aws_lambda_function" "dynamo_configure_restore_lambda" {
		117 |   filename      = "configure-restore.zip"
		118 |   function_name = local.dynamo_configure_restore_lambda_name
		119 |   role          = aws_iam_role.dynamo_configure_restore_role.arn
		120 |   timeout       = 300
		121 |   handler       = "main.lambda_handler"
		122 |   source_code_hash = data.archive_file.dynamo_backup_archive.output_base64sha256
		123 |   runtime = "python3.9"
		124 | }

Check: CKV_AWS_50: "X-ray tracing is enabled for Lambda"
	FAILED for resource: aws_lambda_function.dynamo_configure_restore_lambda
	File: /dynamo-migration.tf:116-124
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-serverless-policies/bc-aws-serverless-4.html

		116 | resource "aws_lambda_function" "dynamo_configure_restore_lambda" {
		117 |   filename      = "configure-restore.zip"
		118 |   function_name = local.dynamo_configure_restore_lambda_name
		119 |   role          = aws_iam_role.dynamo_configure_restore_role.arn
		120 |   timeout       = 300
		121 |   handler       = "main.lambda_handler"
		122 |   source_code_hash = data.archive_file.dynamo_backup_archive.output_base64sha256
		123 |   runtime = "python3.9"
		124 | }

Check: CKV_AWS_272: "Ensure AWS Lambda function is configured to validate code-signing"
	FAILED for resource: aws_lambda_function.elasticsearch_backup_lambda
	File: /elasticsearch-migration.tf:188-214

		188 |  resource "aws_lambda_function" "elasticsearch_backup_lambda" {
		189 |    filename          = "elasticsearch_backup.zip"
		190 |    function_name     = local.elasticsearch_backup_lambda_name
		191 |    source_code_hash  = data.archive_file.elasticsearch_backup_zip.output_base64sha256
		192 |    handler           = "elasticsearch_backup.lambda_handler"
		193 |    runtime           = "python3.7"
		194 |    role              = aws_iam_role.elasticsearch_migration_lambda_role.arn
		195 |    timeout           = 600
		196 |    memory_size       = 1024
		197 |    layers = [
		198 |       "${aws_lambda_layer_version.lambda-layer-AwsCli.arn}",
		199 |       "${aws_lambda_layer_version.lambda-layer-kubectl.arn}"
		200 |     ]
		201 |    
		202 |    environment {
		203 |      variables = {
		204 |        region                                     = var.aws_region
		205 |        es_repository_name                         = local.es_repository_name
		206 |        es_snapshot_name                           = local.es_snapshot_name
		207 |        elasticsearch_source_secret_name           = local.elasticsearch_source_secret_name
		208 |        cluster_role_arn                           = var.source_cluster_admin_role_arn
		209 |        elasticsearh_service_name                  = local.elasticsearh_service_name
		210 |        elasticsearch_source_deployment_namespace  = local.elasticsearch_source_deployment_namespace
		211 |        source_cluster_name                        = local.source_cluster_name
		212 |      }
		213 |    }
		214 |  }

Check: CKV_AWS_116: "Ensure that AWS Lambda function is configured for a Dead Letter Queue(DLQ)"
	FAILED for resource: aws_lambda_function.elasticsearch_backup_lambda
	File: /elasticsearch-migration.tf:188-214
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-general-policies/ensure-that-aws-lambda-function-is-configured-for-a-dead-letter-queue-dlq.html

		188 |  resource "aws_lambda_function" "elasticsearch_backup_lambda" {
		189 |    filename          = "elasticsearch_backup.zip"
		190 |    function_name     = local.elasticsearch_backup_lambda_name
		191 |    source_code_hash  = data.archive_file.elasticsearch_backup_zip.output_base64sha256
		192 |    handler           = "elasticsearch_backup.lambda_handler"
		193 |    runtime           = "python3.7"
		194 |    role              = aws_iam_role.elasticsearch_migration_lambda_role.arn
		195 |    timeout           = 600
		196 |    memory_size       = 1024
		197 |    layers = [
		198 |       "${aws_lambda_layer_version.lambda-layer-AwsCli.arn}",
		199 |       "${aws_lambda_layer_version.lambda-layer-kubectl.arn}"
		200 |     ]
		201 |    
		202 |    environment {
		203 |      variables = {
		204 |        region                                     = var.aws_region
		205 |        es_repository_name                         = local.es_repository_name
		206 |        es_snapshot_name                           = local.es_snapshot_name
		207 |        elasticsearch_source_secret_name           = local.elasticsearch_source_secret_name
		208 |        cluster_role_arn                           = var.source_cluster_admin_role_arn
		209 |        elasticsearh_service_name                  = local.elasticsearh_service_name
		210 |        elasticsearch_source_deployment_namespace  = local.elasticsearch_source_deployment_namespace
		211 |        source_cluster_name                        = local.source_cluster_name
		212 |      }
		213 |    }
		214 |  }

Check: CKV_AWS_173: "Check encryption settings for Lambda environmental variable"
	FAILED for resource: aws_lambda_function.elasticsearch_backup_lambda
	File: /elasticsearch-migration.tf:188-214
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-serverless-policies/bc-aws-serverless-5.html

		188 |  resource "aws_lambda_function" "elasticsearch_backup_lambda" {
		189 |    filename          = "elasticsearch_backup.zip"
		190 |    function_name     = local.elasticsearch_backup_lambda_name
		191 |    source_code_hash  = data.archive_file.elasticsearch_backup_zip.output_base64sha256
		192 |    handler           = "elasticsearch_backup.lambda_handler"
		193 |    runtime           = "python3.7"
		194 |    role              = aws_iam_role.elasticsearch_migration_lambda_role.arn
		195 |    timeout           = 600
		196 |    memory_size       = 1024
		197 |    layers = [
		198 |       "${aws_lambda_layer_version.lambda-layer-AwsCli.arn}",
		199 |       "${aws_lambda_layer_version.lambda-layer-kubectl.arn}"
		200 |     ]
		201 |    
		202 |    environment {
		203 |      variables = {
		204 |        region                                     = var.aws_region
		205 |        es_repository_name                         = local.es_repository_name
		206 |        es_snapshot_name                           = local.es_snapshot_name
		207 |        elasticsearch_source_secret_name           = local.elasticsearch_source_secret_name
		208 |        cluster_role_arn                           = var.source_cluster_admin_role_arn
		209 |        elasticsearh_service_name                  = local.elasticsearh_service_name
		210 |        elasticsearch_source_deployment_namespace  = local.elasticsearch_source_deployment_namespace
		211 |        source_cluster_name                        = local.source_cluster_name
		212 |      }
		213 |    }
		214 |  }

Check: CKV_AWS_115: "Ensure that AWS Lambda function is configured for function-level concurrent execution limit"
	FAILED for resource: aws_lambda_function.elasticsearch_backup_lambda
	File: /elasticsearch-migration.tf:188-214
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-general-policies/ensure-that-aws-lambda-function-is-configured-for-function-level-concurrent-execution-limit.html

		188 |  resource "aws_lambda_function" "elasticsearch_backup_lambda" {
		189 |    filename          = "elasticsearch_backup.zip"
		190 |    function_name     = local.elasticsearch_backup_lambda_name
		191 |    source_code_hash  = data.archive_file.elasticsearch_backup_zip.output_base64sha256
		192 |    handler           = "elasticsearch_backup.lambda_handler"
		193 |    runtime           = "python3.7"
		194 |    role              = aws_iam_role.elasticsearch_migration_lambda_role.arn
		195 |    timeout           = 600
		196 |    memory_size       = 1024
		197 |    layers = [
		198 |       "${aws_lambda_layer_version.lambda-layer-AwsCli.arn}",
		199 |       "${aws_lambda_layer_version.lambda-layer-kubectl.arn}"
		200 |     ]
		201 |    
		202 |    environment {
		203 |      variables = {
		204 |        region                                     = var.aws_region
		205 |        es_repository_name                         = local.es_repository_name
		206 |        es_snapshot_name                           = local.es_snapshot_name
		207 |        elasticsearch_source_secret_name           = local.elasticsearch_source_secret_name
		208 |        cluster_role_arn                           = var.source_cluster_admin_role_arn
		209 |        elasticsearh_service_name                  = local.elasticsearh_service_name
		210 |        elasticsearch_source_deployment_namespace  = local.elasticsearch_source_deployment_namespace
		211 |        source_cluster_name                        = local.source_cluster_name
		212 |      }
		213 |    }
		214 |  }

Check: CKV_AWS_117: "Ensure that AWS Lambda function is configured inside a VPC"
	FAILED for resource: aws_lambda_function.elasticsearch_backup_lambda
	File: /elasticsearch-migration.tf:188-214
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-general-policies/ensure-that-aws-lambda-function-is-configured-inside-a-vpc-1.html

		188 |  resource "aws_lambda_function" "elasticsearch_backup_lambda" {
		189 |    filename          = "elasticsearch_backup.zip"
		190 |    function_name     = local.elasticsearch_backup_lambda_name
		191 |    source_code_hash  = data.archive_file.elasticsearch_backup_zip.output_base64sha256
		192 |    handler           = "elasticsearch_backup.lambda_handler"
		193 |    runtime           = "python3.7"
		194 |    role              = aws_iam_role.elasticsearch_migration_lambda_role.arn
		195 |    timeout           = 600
		196 |    memory_size       = 1024
		197 |    layers = [
		198 |       "${aws_lambda_layer_version.lambda-layer-AwsCli.arn}",
		199 |       "${aws_lambda_layer_version.lambda-layer-kubectl.arn}"
		200 |     ]
		201 |    
		202 |    environment {
		203 |      variables = {
		204 |        region                                     = var.aws_region
		205 |        es_repository_name                         = local.es_repository_name
		206 |        es_snapshot_name                           = local.es_snapshot_name
		207 |        elasticsearch_source_secret_name           = local.elasticsearch_source_secret_name
		208 |        cluster_role_arn                           = var.source_cluster_admin_role_arn
		209 |        elasticsearh_service_name                  = local.elasticsearh_service_name
		210 |        elasticsearch_source_deployment_namespace  = local.elasticsearch_source_deployment_namespace
		211 |        source_cluster_name                        = local.source_cluster_name
		212 |      }
		213 |    }
		214 |  }

Check: CKV_AWS_50: "X-ray tracing is enabled for Lambda"
	FAILED for resource: aws_lambda_function.elasticsearch_backup_lambda
	File: /elasticsearch-migration.tf:188-214
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-serverless-policies/bc-aws-serverless-4.html

		188 |  resource "aws_lambda_function" "elasticsearch_backup_lambda" {
		189 |    filename          = "elasticsearch_backup.zip"
		190 |    function_name     = local.elasticsearch_backup_lambda_name
		191 |    source_code_hash  = data.archive_file.elasticsearch_backup_zip.output_base64sha256
		192 |    handler           = "elasticsearch_backup.lambda_handler"
		193 |    runtime           = "python3.7"
		194 |    role              = aws_iam_role.elasticsearch_migration_lambda_role.arn
		195 |    timeout           = 600
		196 |    memory_size       = 1024
		197 |    layers = [
		198 |       "${aws_lambda_layer_version.lambda-layer-AwsCli.arn}",
		199 |       "${aws_lambda_layer_version.lambda-layer-kubectl.arn}"
		200 |     ]
		201 |    
		202 |    environment {
		203 |      variables = {
		204 |        region                                     = var.aws_region
		205 |        es_repository_name                         = local.es_repository_name
		206 |        es_snapshot_name                           = local.es_snapshot_name
		207 |        elasticsearch_source_secret_name           = local.elasticsearch_source_secret_name
		208 |        cluster_role_arn                           = var.source_cluster_admin_role_arn
		209 |        elasticsearh_service_name                  = local.elasticsearh_service_name
		210 |        elasticsearch_source_deployment_namespace  = local.elasticsearch_source_deployment_namespace
		211 |        source_cluster_name                        = local.source_cluster_name
		212 |      }
		213 |    }
		214 |  }

Check: CKV_AWS_272: "Ensure AWS Lambda function is configured to validate code-signing"
	FAILED for resource: aws_lambda_function.elasticsearch_backup_status_check_lambda
	File: /elasticsearch-migration.tf:216-242

		216 |  resource "aws_lambda_function" "elasticsearch_backup_status_check_lambda" {
		217 |    filename          = "elasticsearch_snapshot_status_check.zip"
		218 |    function_name     = local.elasticsearch_backup_status_check_lambda_name
		219 |    source_code_hash  = data.archive_file.elasticsearch_status_check_zip.output_base64sha256
		220 |    handler           = "elasticsearch_snapshot_status_check.lambda_handler"
		221 |    runtime           = "python3.7"
		222 |    role              = aws_iam_role.elasticsearch_migration_lambda_role.arn
		223 |    timeout           = 600
		224 |    memory_size       = 1024
		225 |    layers = [
		226 |       "${aws_lambda_layer_version.lambda-layer-AwsCli.arn}",
		227 |       "${aws_lambda_layer_version.lambda-layer-kubectl.arn}"
		228 |     ]
		229 |    
		230 |    environment {
		231 |      variables = {
		232 |        region                                    = var.aws_region
		233 |        es_repository_name                        = local.es_repository_name
		234 |        es_snapshot_name                          = local.es_snapshot_name
		235 |        elasticsearch_source_secret_name          = local.elasticsearch_source_secret_name
		236 |        cluster_role_arn                          = var.source_cluster_admin_role_arn
		237 |        elasticsearh_service_name                 = local.elasticsearh_service_name
		238 |        elasticsearch_source_deployment_namespace = local.elasticsearch_source_deployment_namespace
		239 |        source_cluster_name                       = local.source_cluster_name
		240 |      }
		241 |    }
		242 |  }

Check: CKV_AWS_116: "Ensure that AWS Lambda function is configured for a Dead Letter Queue(DLQ)"
	FAILED for resource: aws_lambda_function.elasticsearch_backup_status_check_lambda
	File: /elasticsearch-migration.tf:216-242
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-general-policies/ensure-that-aws-lambda-function-is-configured-for-a-dead-letter-queue-dlq.html

		216 |  resource "aws_lambda_function" "elasticsearch_backup_status_check_lambda" {
		217 |    filename          = "elasticsearch_snapshot_status_check.zip"
		218 |    function_name     = local.elasticsearch_backup_status_check_lambda_name
		219 |    source_code_hash  = data.archive_file.elasticsearch_status_check_zip.output_base64sha256
		220 |    handler           = "elasticsearch_snapshot_status_check.lambda_handler"
		221 |    runtime           = "python3.7"
		222 |    role              = aws_iam_role.elasticsearch_migration_lambda_role.arn
		223 |    timeout           = 600
		224 |    memory_size       = 1024
		225 |    layers = [
		226 |       "${aws_lambda_layer_version.lambda-layer-AwsCli.arn}",
		227 |       "${aws_lambda_layer_version.lambda-layer-kubectl.arn}"
		228 |     ]
		229 |    
		230 |    environment {
		231 |      variables = {
		232 |        region                                    = var.aws_region
		233 |        es_repository_name                        = local.es_repository_name
		234 |        es_snapshot_name                          = local.es_snapshot_name
		235 |        elasticsearch_source_secret_name          = local.elasticsearch_source_secret_name
		236 |        cluster_role_arn                          = var.source_cluster_admin_role_arn
		237 |        elasticsearh_service_name                 = local.elasticsearh_service_name
		238 |        elasticsearch_source_deployment_namespace = local.elasticsearch_source_deployment_namespace
		239 |        source_cluster_name                       = local.source_cluster_name
		240 |      }
		241 |    }
		242 |  }

Check: CKV_AWS_173: "Check encryption settings for Lambda environmental variable"
	FAILED for resource: aws_lambda_function.elasticsearch_backup_status_check_lambda
	File: /elasticsearch-migration.tf:216-242
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-serverless-policies/bc-aws-serverless-5.html

		216 |  resource "aws_lambda_function" "elasticsearch_backup_status_check_lambda" {
		217 |    filename          = "elasticsearch_snapshot_status_check.zip"
		218 |    function_name     = local.elasticsearch_backup_status_check_lambda_name
		219 |    source_code_hash  = data.archive_file.elasticsearch_status_check_zip.output_base64sha256
		220 |    handler           = "elasticsearch_snapshot_status_check.lambda_handler"
		221 |    runtime           = "python3.7"
		222 |    role              = aws_iam_role.elasticsearch_migration_lambda_role.arn
		223 |    timeout           = 600
		224 |    memory_size       = 1024
		225 |    layers = [
		226 |       "${aws_lambda_layer_version.lambda-layer-AwsCli.arn}",
		227 |       "${aws_lambda_layer_version.lambda-layer-kubectl.arn}"
		228 |     ]
		229 |    
		230 |    environment {
		231 |      variables = {
		232 |        region                                    = var.aws_region
		233 |        es_repository_name                        = local.es_repository_name
		234 |        es_snapshot_name                          = local.es_snapshot_name
		235 |        elasticsearch_source_secret_name          = local.elasticsearch_source_secret_name
		236 |        cluster_role_arn                          = var.source_cluster_admin_role_arn
		237 |        elasticsearh_service_name                 = local.elasticsearh_service_name
		238 |        elasticsearch_source_deployment_namespace = local.elasticsearch_source_deployment_namespace
		239 |        source_cluster_name                       = local.source_cluster_name
		240 |      }
		241 |    }
		242 |  }

Check: CKV_AWS_115: "Ensure that AWS Lambda function is configured for function-level concurrent execution limit"
	FAILED for resource: aws_lambda_function.elasticsearch_backup_status_check_lambda
	File: /elasticsearch-migration.tf:216-242
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-general-policies/ensure-that-aws-lambda-function-is-configured-for-function-level-concurrent-execution-limit.html

		216 |  resource "aws_lambda_function" "elasticsearch_backup_status_check_lambda" {
		217 |    filename          = "elasticsearch_snapshot_status_check.zip"
		218 |    function_name     = local.elasticsearch_backup_status_check_lambda_name
		219 |    source_code_hash  = data.archive_file.elasticsearch_status_check_zip.output_base64sha256
		220 |    handler           = "elasticsearch_snapshot_status_check.lambda_handler"
		221 |    runtime           = "python3.7"
		222 |    role              = aws_iam_role.elasticsearch_migration_lambda_role.arn
		223 |    timeout           = 600
		224 |    memory_size       = 1024
		225 |    layers = [
		226 |       "${aws_lambda_layer_version.lambda-layer-AwsCli.arn}",
		227 |       "${aws_lambda_layer_version.lambda-layer-kubectl.arn}"
		228 |     ]
		229 |    
		230 |    environment {
		231 |      variables = {
		232 |        region                                    = var.aws_region
		233 |        es_repository_name                        = local.es_repository_name
		234 |        es_snapshot_name                          = local.es_snapshot_name
		235 |        elasticsearch_source_secret_name          = local.elasticsearch_source_secret_name
		236 |        cluster_role_arn                          = var.source_cluster_admin_role_arn
		237 |        elasticsearh_service_name                 = local.elasticsearh_service_name
		238 |        elasticsearch_source_deployment_namespace = local.elasticsearch_source_deployment_namespace
		239 |        source_cluster_name                       = local.source_cluster_name
		240 |      }
		241 |    }
		242 |  }

Check: CKV_AWS_117: "Ensure that AWS Lambda function is configured inside a VPC"
	FAILED for resource: aws_lambda_function.elasticsearch_backup_status_check_lambda
	File: /elasticsearch-migration.tf:216-242
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-general-policies/ensure-that-aws-lambda-function-is-configured-inside-a-vpc-1.html

		216 |  resource "aws_lambda_function" "elasticsearch_backup_status_check_lambda" {
		217 |    filename          = "elasticsearch_snapshot_status_check.zip"
		218 |    function_name     = local.elasticsearch_backup_status_check_lambda_name
		219 |    source_code_hash  = data.archive_file.elasticsearch_status_check_zip.output_base64sha256
		220 |    handler           = "elasticsearch_snapshot_status_check.lambda_handler"
		221 |    runtime           = "python3.7"
		222 |    role              = aws_iam_role.elasticsearch_migration_lambda_role.arn
		223 |    timeout           = 600
		224 |    memory_size       = 1024
		225 |    layers = [
		226 |       "${aws_lambda_layer_version.lambda-layer-AwsCli.arn}",
		227 |       "${aws_lambda_layer_version.lambda-layer-kubectl.arn}"
		228 |     ]
		229 |    
		230 |    environment {
		231 |      variables = {
		232 |        region                                    = var.aws_region
		233 |        es_repository_name                        = local.es_repository_name
		234 |        es_snapshot_name                          = local.es_snapshot_name
		235 |        elasticsearch_source_secret_name          = local.elasticsearch_source_secret_name
		236 |        cluster_role_arn                          = var.source_cluster_admin_role_arn
		237 |        elasticsearh_service_name                 = local.elasticsearh_service_name
		238 |        elasticsearch_source_deployment_namespace = local.elasticsearch_source_deployment_namespace
		239 |        source_cluster_name                       = local.source_cluster_name
		240 |      }
		241 |    }
		242 |  }

Check: CKV_AWS_50: "X-ray tracing is enabled for Lambda"
	FAILED for resource: aws_lambda_function.elasticsearch_backup_status_check_lambda
	File: /elasticsearch-migration.tf:216-242
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-serverless-policies/bc-aws-serverless-4.html

		216 |  resource "aws_lambda_function" "elasticsearch_backup_status_check_lambda" {
		217 |    filename          = "elasticsearch_snapshot_status_check.zip"
		218 |    function_name     = local.elasticsearch_backup_status_check_lambda_name
		219 |    source_code_hash  = data.archive_file.elasticsearch_status_check_zip.output_base64sha256
		220 |    handler           = "elasticsearch_snapshot_status_check.lambda_handler"
		221 |    runtime           = "python3.7"
		222 |    role              = aws_iam_role.elasticsearch_migration_lambda_role.arn
		223 |    timeout           = 600
		224 |    memory_size       = 1024
		225 |    layers = [
		226 |       "${aws_lambda_layer_version.lambda-layer-AwsCli.arn}",
		227 |       "${aws_lambda_layer_version.lambda-layer-kubectl.arn}"
		228 |     ]
		229 |    
		230 |    environment {
		231 |      variables = {
		232 |        region                                    = var.aws_region
		233 |        es_repository_name                        = local.es_repository_name
		234 |        es_snapshot_name                          = local.es_snapshot_name
		235 |        elasticsearch_source_secret_name          = local.elasticsearch_source_secret_name
		236 |        cluster_role_arn                          = var.source_cluster_admin_role_arn
		237 |        elasticsearh_service_name                 = local.elasticsearh_service_name
		238 |        elasticsearch_source_deployment_namespace = local.elasticsearch_source_deployment_namespace
		239 |        source_cluster_name                       = local.source_cluster_name
		240 |      }
		241 |    }
		242 |  }

Check: CKV_AWS_272: "Ensure AWS Lambda function is configured to validate code-signing"
	FAILED for resource: aws_lambda_function.elasticsearch_restore_lambda
	File: /elasticsearch-migration.tf:244-271

		244 |  resource "aws_lambda_function" "elasticsearch_restore_lambda" {
		245 |    filename          = "elasticSearch_restore_from_snapshot.zip"
		246 |    function_name     = local.elasticsearch_restore_lambda_name
		247 |    source_code_hash  = data.archive_file.elasticsearch_restore_zip.output_base64sha256
		248 |    handler           = "elasticSearch_restore_from_snapshot.lambda_handler"
		249 |    runtime           = "python3.7"
		250 |    role              = aws_iam_role.elasticsearch_migration_lambda_role.arn
		251 |    timeout           = 600
		252 |    memory_size       = 1024
		253 |    layers = [
		254 |       "${aws_lambda_layer_version.lambda-layer-AwsCli.arn}",
		255 |       "${aws_lambda_layer_version.lambda-layer-kubectl.arn}"
		256 |     ]
		257 |    
		258 |    environment {
		259 |      variables = {
		260 |        region                                    = var.aws_region
		261 |        es_repository_name                        = local.es_repository_name
		262 |        es_snapshot_name                          = local.es_snapshot_name
		263 |        elasticsearch_target_secret_name          = local.elasticsearch_target_secret_name
		264 |        elasticsearch_target_backup_s3Bucket_name = local.elasticsearch_target_backup_s3Bucket_name
		265 |        cluster_role_arn                          = var.target_cluster_admin_role_arn
		266 |        elasticsearh_service_name                 = local.elasticsearh_service_name
		267 |        elasticsearch_target_deployment_namespace = local.elasticsearch_target_deployment_namespace
		268 |        target_eks_cluster_name                   = var.target_eks_cluster_name
		269 |      }
		270 |    }
		271 |  }
Check: CKV_AWS_116: "Ensure that AWS Lambda function is configured for a Dead Letter Queue(DLQ)"
	FAILED for resource: aws_lambda_function.elasticsearch_restore_lambda
	File: /elasticsearch-migration.tf:244-271
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-general-policies/ensure-that-aws-lambda-function-is-configured-for-a-dead-letter-queue-dlq.html

		244 |  resource "aws_lambda_function" "elasticsearch_restore_lambda" {
		245 |    filename          = "elasticSearch_restore_from_snapshot.zip"
		246 |    function_name     = local.elasticsearch_restore_lambda_name
		247 |    source_code_hash  = data.archive_file.elasticsearch_restore_zip.output_base64sha256
		248 |    handler           = "elasticSearch_restore_from_snapshot.lambda_handler"
		249 |    runtime           = "python3.7"
		250 |    role              = aws_iam_role.elasticsearch_migration_lambda_role.arn
		251 |    timeout           = 600
		252 |    memory_size       = 1024
		253 |    layers = [
		254 |       "${aws_lambda_layer_version.lambda-layer-AwsCli.arn}",
		255 |       "${aws_lambda_layer_version.lambda-layer-kubectl.arn}"
		256 |     ]
		257 |    
		258 |    environment {
		259 |      variables = {
		260 |        region                                    = var.aws_region
		261 |        es_repository_name                        = local.es_repository_name
		262 |        es_snapshot_name                          = local.es_snapshot_name
		263 |        elasticsearch_target_secret_name          = local.elasticsearch_target_secret_name
		264 |        elasticsearch_target_backup_s3Bucket_name = local.elasticsearch_target_backup_s3Bucket_name
		265 |        cluster_role_arn                          = var.target_cluster_admin_role_arn
		266 |        elasticsearh_service_name                 = local.elasticsearh_service_name
		267 |        elasticsearch_target_deployment_namespace = local.elasticsearch_target_deployment_namespace
		268 |        target_eks_cluster_name                   = var.target_eks_cluster_name
		269 |      }
		270 |    }
		271 |  }
Check: CKV_AWS_173: "Check encryption settings for Lambda environmental variable"
	FAILED for resource: aws_lambda_function.elasticsearch_restore_lambda
	File: /elasticsearch-migration.tf:244-271
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-serverless-policies/bc-aws-serverless-5.html

		244 |  resource "aws_lambda_function" "elasticsearch_restore_lambda" {
		245 |    filename          = "elasticSearch_restore_from_snapshot.zip"
		246 |    function_name     = local.elasticsearch_restore_lambda_name
		247 |    source_code_hash  = data.archive_file.elasticsearch_restore_zip.output_base64sha256
		248 |    handler           = "elasticSearch_restore_from_snapshot.lambda_handler"
		249 |    runtime           = "python3.7"
		250 |    role              = aws_iam_role.elasticsearch_migration_lambda_role.arn
		251 |    timeout           = 600
		252 |    memory_size       = 1024
		253 |    layers = [
		254 |       "${aws_lambda_layer_version.lambda-layer-AwsCli.arn}",
		255 |       "${aws_lambda_layer_version.lambda-layer-kubectl.arn}"
		256 |     ]
		257 |    
		258 |    environment {
		259 |      variables = {
		260 |        region                                    = var.aws_region
		261 |        es_repository_name                        = local.es_repository_name
		262 |        es_snapshot_name                          = local.es_snapshot_name
		263 |        elasticsearch_target_secret_name          = local.elasticsearch_target_secret_name
		264 |        elasticsearch_target_backup_s3Bucket_name = local.elasticsearch_target_backup_s3Bucket_name
		265 |        cluster_role_arn                          = var.target_cluster_admin_role_arn
		266 |        elasticsearh_service_name                 = local.elasticsearh_service_name
		267 |        elasticsearch_target_deployment_namespace = local.elasticsearch_target_deployment_namespace
		268 |        target_eks_cluster_name                   = var.target_eks_cluster_name
		269 |      }
		270 |    }
		271 |  }
Check: CKV_AWS_115: "Ensure that AWS Lambda function is configured for function-level concurrent execution limit"
	FAILED for resource: aws_lambda_function.elasticsearch_restore_lambda
	File: /elasticsearch-migration.tf:244-271
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-general-policies/ensure-that-aws-lambda-function-is-configured-for-function-level-concurrent-execution-limit.html

		244 |  resource "aws_lambda_function" "elasticsearch_restore_lambda" {
		245 |    filename          = "elasticSearch_restore_from_snapshot.zip"
		246 |    function_name     = local.elasticsearch_restore_lambda_name
		247 |    source_code_hash  = data.archive_file.elasticsearch_restore_zip.output_base64sha256
		248 |    handler           = "elasticSearch_restore_from_snapshot.lambda_handler"
		249 |    runtime           = "python3.7"
		250 |    role              = aws_iam_role.elasticsearch_migration_lambda_role.arn
		251 |    timeout           = 600
		252 |    memory_size       = 1024
		253 |    layers = [
		254 |       "${aws_lambda_layer_version.lambda-layer-AwsCli.arn}",
		255 |       "${aws_lambda_layer_version.lambda-layer-kubectl.arn}"
		256 |     ]
		257 |    
		258 |    environment {
		259 |      variables = {
		260 |        region                                    = var.aws_region
		261 |        es_repository_name                        = local.es_repository_name
		262 |        es_snapshot_name                          = local.es_snapshot_name
		263 |        elasticsearch_target_secret_name          = local.elasticsearch_target_secret_name
		264 |        elasticsearch_target_backup_s3Bucket_name = local.elasticsearch_target_backup_s3Bucket_name
		265 |        cluster_role_arn                          = var.target_cluster_admin_role_arn
		266 |        elasticsearh_service_name                 = local.elasticsearh_service_name
		267 |        elasticsearch_target_deployment_namespace = local.elasticsearch_target_deployment_namespace
		268 |        target_eks_cluster_name                   = var.target_eks_cluster_name
		269 |      }
		270 |    }
		271 |  }
Check: CKV_AWS_117: "Ensure that AWS Lambda function is configured inside a VPC"
	FAILED for resource: aws_lambda_function.elasticsearch_restore_lambda
	File: /elasticsearch-migration.tf:244-271
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-general-policies/ensure-that-aws-lambda-function-is-configured-inside-a-vpc-1.html

		244 |  resource "aws_lambda_function" "elasticsearch_restore_lambda" {
		245 |    filename          = "elasticSearch_restore_from_snapshot.zip"
		246 |    function_name     = local.elasticsearch_restore_lambda_name
		247 |    source_code_hash  = data.archive_file.elasticsearch_restore_zip.output_base64sha256
		248 |    handler           = "elasticSearch_restore_from_snapshot.lambda_handler"
		249 |    runtime           = "python3.7"
		250 |    role              = aws_iam_role.elasticsearch_migration_lambda_role.arn
		251 |    timeout           = 600
		252 |    memory_size       = 1024
		253 |    layers = [
		254 |       "${aws_lambda_layer_version.lambda-layer-AwsCli.arn}",
		255 |       "${aws_lambda_layer_version.lambda-layer-kubectl.arn}"
		256 |     ]
		257 |    
		258 |    environment {
		259 |      variables = {
		260 |        region                                    = var.aws_region
		261 |        es_repository_name                        = local.es_repository_name
		262 |        es_snapshot_name                          = local.es_snapshot_name
		263 |        elasticsearch_target_secret_name          = local.elasticsearch_target_secret_name
		264 |        elasticsearch_target_backup_s3Bucket_name = local.elasticsearch_target_backup_s3Bucket_name
		265 |        cluster_role_arn                          = var.target_cluster_admin_role_arn
		266 |        elasticsearh_service_name                 = local.elasticsearh_service_name
		267 |        elasticsearch_target_deployment_namespace = local.elasticsearch_target_deployment_namespace
		268 |        target_eks_cluster_name                   = var.target_eks_cluster_name
		269 |      }
		270 |    }
		271 |  }
Check: CKV_AWS_50: "X-ray tracing is enabled for Lambda"
	FAILED for resource: aws_lambda_function.elasticsearch_restore_lambda
	File: /elasticsearch-migration.tf:244-271
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-serverless-policies/bc-aws-serverless-4.html

		244 |  resource "aws_lambda_function" "elasticsearch_restore_lambda" {
		245 |    filename          = "elasticSearch_restore_from_snapshot.zip"
		246 |    function_name     = local.elasticsearch_restore_lambda_name
		247 |    source_code_hash  = data.archive_file.elasticsearch_restore_zip.output_base64sha256
		248 |    handler           = "elasticSearch_restore_from_snapshot.lambda_handler"
		249 |    runtime           = "python3.7"
		250 |    role              = aws_iam_role.elasticsearch_migration_lambda_role.arn
		251 |    timeout           = 600
		252 |    memory_size       = 1024
		253 |    layers = [
		254 |       "${aws_lambda_layer_version.lambda-layer-AwsCli.arn}",
		255 |       "${aws_lambda_layer_version.lambda-layer-kubectl.arn}"
		256 |     ]
		257 |    
		258 |    environment {
		259 |      variables = {
		260 |        region                                    = var.aws_region
		261 |        es_repository_name                        = local.es_repository_name
		262 |        es_snapshot_name                          = local.es_snapshot_name
		263 |        elasticsearch_target_secret_name          = local.elasticsearch_target_secret_name
		264 |        elasticsearch_target_backup_s3Bucket_name = local.elasticsearch_target_backup_s3Bucket_name
		265 |        cluster_role_arn                          = var.target_cluster_admin_role_arn
		266 |        elasticsearh_service_name                 = local.elasticsearh_service_name
		267 |        elasticsearch_target_deployment_namespace = local.elasticsearch_target_deployment_namespace
		268 |        target_eks_cluster_name                   = var.target_eks_cluster_name
		269 |      }
		270 |    }
		271 |  }
Check: CKV_TF_1: "Ensure Terraform module sources use a commit hash"
	FAILED for resource: dynamo_step_function
	File: /main.tf:1-14

		1  | module "dynamo_step_function" {
		2  |   source     = "terraform-aws-modules/step-functions/aws"
		3  |   name       = local.dynamo_step_function_name
		4  |   definition = local.dynamo_definition_template
		5  |   type       = "STANDARD"
		6  |   service_integrations = {
		7  |     lambda = {
		8  |       lambda = ["${aws_lambda_function.get_source_dest_lambda.arn}",
		9  |       "${aws_lambda_function.dynamo_configure_restore_lambda.arn}"]
		10 |     }
		11 |   }
		12 |   role_arn = aws_iam_role.dynamo_step_function_role.arn
		13 |   use_existing_role = true
		14 | }

Check: CKV_TF_1: "Ensure Terraform module sources use a commit hash"
	FAILED for resource: s3_step_function
	File: /main.tf:16-28

		16 | module "s3_step_function" {
		17 |   source     = "terraform-aws-modules/step-functions/aws"
		18 |   name       = local.s3_step_function_name
		19 |   definition = local.s3_definition_template
		20 |   type       = "STANDARD"
		21 |   service_integrations = {
		22 |     lambda = {
		23 |       lambda = ["${aws_lambda_function.get_source_dest_lambda.arn}"]
		24 |     }
		25 |   }
		26 |   role_arn = aws_iam_role.s3_step_function_role.arn
		27 |   use_existing_role = true
		28 | }

Check: CKV_TF_1: "Ensure Terraform module sources use a commit hash"
	FAILED for resource: elasticsearch_step_function
	File: /main.tf:30-48

		30 | module "elasticsearch_step_function" {
		31 |   source     = "terraform-aws-modules/step-functions/aws"
		32 |   name       = local.elasticsearch_step_function_name
		33 |   definition = local.elasticsearch_definition_template
		34 |   type       = "STANDARD"
		35 |   service_integrations = {
		36 |     lambda = {
		37 |       lambda = [
		38 |         "${aws_lambda_function.elasticsearch_backup_lambda.arn}",
		39 |         "${aws_lambda_function.elasticsearch_backup_status_check_lambda.arn}",
		40 |         "${aws_lambda_function.elasticsearch_restore_lambda.arn}"
		41 |       ]
		42 |     }
		43 |   }
		44 | 
		45 |   policies = ["arn:aws:iam::aws:policy/AdministratorAccess"]
		46 |   attach_policies = true
		47 |   number_of_policies = 1
		48 | }

Check: CKV_TF_1: "Ensure Terraform module sources use a commit hash"
	FAILED for resource: mongodb_step_function
	File: /main.tf:50-63

		50 | module "mongodb_step_function" {
		51 |   source     = "terraform-aws-modules/step-functions/aws"
		52 |   name       = local.mongodb_step_function_name
		53 |   definition = local.mongodb_definition_template
		54 |   type       = "STANDARD"
		55 |   service_integrations = {
		56 |     lambda = {
		57 |       lambda = [
		58 |         "${aws_lambda_function.mongodb_backup_lambda.arn}",
		59 |         "${aws_lambda_function.mongodb_restore_lambda.arn}"
		60 |       ]
		61 |     }
		62 |   }
		63 | }
Check: CKV_AWS_272: "Ensure AWS Lambda function is configured to validate code-signing"
	FAILED for resource: aws_lambda_function.mongodb_backup_lambda
	File: /mongodb-migration.tf:149-176

		149 |  resource "aws_lambda_function" "mongodb_backup_lambda" {
		150 |    filename          = "backup_mongodb.zip"
		151 |    function_name     = local.mongodb_backup_lambda_name
		152 |    source_code_hash  = "${data.archive_file.mongodb_backup_zip.output_base64sha256}"
		153 |    handler           = "mongodb_backup.lambda_handler"
		154 |    runtime           = "python3.7"
		155 |    role              = aws_iam_role.mongodb_migration_lambda_role.arn
		156 |    timeout           = 600
		157 |    memory_size       = 1024
		158 |    layers = [
		159 |       "${aws_lambda_layer_version.lambda-layer-AwsCli.arn}",
		160 |       "${aws_lambda_layer_version.lambda-layer-kubectl.arn}",
		161 |       "${aws_lambda_layer_version.lambda-layer-mongodump.arn}"
		162 |     ]
		163 |    
		164 |    environment {
		165 |      variables = {
		166 |        aws_region                        = var.aws_region
		167 |        mongodb_backup_file_name          = local.mongodb_backup_file_name
		168 |        mongodb_source_secret_name        = local.mongodb_source_secret_name
		169 |        cluster_role_arn                  = var.source_cluster_admin_role_arn
		170 |        mongodb_service_name              = local.mongodb_service_name
		171 |        mongodb_deployment_namespace      = local.mongodb_source_deployment_namespace
		172 |        mongodb_s3_bucket                 = "${aws_s3_bucket.mongodb_backup_bucket.id}"
		173 |        source_cluster_name               = local.source_cluster_name
		174 |      }
		175 |    }
		176 |  }

Check: CKV_AWS_116: "Ensure that AWS Lambda function is configured for a Dead Letter Queue(DLQ)"
	FAILED for resource: aws_lambda_function.mongodb_backup_lambda
	File: /mongodb-migration.tf:149-176
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-general-policies/ensure-that-aws-lambda-function-is-configured-for-a-dead-letter-queue-dlq.html

		149 |  resource "aws_lambda_function" "mongodb_backup_lambda" {
		150 |    filename          = "backup_mongodb.zip"
		151 |    function_name     = local.mongodb_backup_lambda_name
		152 |    source_code_hash  = "${data.archive_file.mongodb_backup_zip.output_base64sha256}"
		153 |    handler           = "mongodb_backup.lambda_handler"
		154 |    runtime           = "python3.7"
		155 |    role              = aws_iam_role.mongodb_migration_lambda_role.arn
		156 |    timeout           = 600
		157 |    memory_size       = 1024
		158 |    layers = [
		159 |       "${aws_lambda_layer_version.lambda-layer-AwsCli.arn}",
		160 |       "${aws_lambda_layer_version.lambda-layer-kubectl.arn}",
		161 |       "${aws_lambda_layer_version.lambda-layer-mongodump.arn}"
		162 |     ]
		163 |    
		164 |    environment {
		165 |      variables = {
		166 |        aws_region                        = var.aws_region
		167 |        mongodb_backup_file_name          = local.mongodb_backup_file_name
		168 |        mongodb_source_secret_name        = local.mongodb_source_secret_name
		169 |        cluster_role_arn                  = var.source_cluster_admin_role_arn
		170 |        mongodb_service_name              = local.mongodb_service_name
		171 |        mongodb_deployment_namespace      = local.mongodb_source_deployment_namespace
		172 |        mongodb_s3_bucket                 = "${aws_s3_bucket.mongodb_backup_bucket.id}"
		173 |        source_cluster_name               = local.source_cluster_name
		174 |      }
		175 |    }
		176 |  }

Check: CKV_AWS_173: "Check encryption settings for Lambda environmental variable"
	FAILED for resource: aws_lambda_function.mongodb_backup_lambda
	File: /mongodb-migration.tf:149-176
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-serverless-policies/bc-aws-serverless-5.html

		149 |  resource "aws_lambda_function" "mongodb_backup_lambda" {
		150 |    filename          = "backup_mongodb.zip"
		151 |    function_name     = local.mongodb_backup_lambda_name
		152 |    source_code_hash  = "${data.archive_file.mongodb_backup_zip.output_base64sha256}"
		153 |    handler           = "mongodb_backup.lambda_handler"
		154 |    runtime           = "python3.7"
		155 |    role              = aws_iam_role.mongodb_migration_lambda_role.arn
		156 |    timeout           = 600
		157 |    memory_size       = 1024
		158 |    layers = [
		159 |       "${aws_lambda_layer_version.lambda-layer-AwsCli.arn}",
		160 |       "${aws_lambda_layer_version.lambda-layer-kubectl.arn}",
		161 |       "${aws_lambda_layer_version.lambda-layer-mongodump.arn}"
		162 |     ]
		163 |    
		164 |    environment {
		165 |      variables = {
		166 |        aws_region                        = var.aws_region
		167 |        mongodb_backup_file_name          = local.mongodb_backup_file_name
		168 |        mongodb_source_secret_name        = local.mongodb_source_secret_name
		169 |        cluster_role_arn                  = var.source_cluster_admin_role_arn
		170 |        mongodb_service_name              = local.mongodb_service_name
		171 |        mongodb_deployment_namespace      = local.mongodb_source_deployment_namespace
		172 |        mongodb_s3_bucket                 = "${aws_s3_bucket.mongodb_backup_bucket.id}"
		173 |        source_cluster_name               = local.source_cluster_name
		174 |      }
		175 |    }
		176 |  }

Check: CKV_AWS_115: "Ensure that AWS Lambda function is configured for function-level concurrent execution limit"
	FAILED for resource: aws_lambda_function.mongodb_backup_lambda
	File: /mongodb-migration.tf:149-176
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-general-policies/ensure-that-aws-lambda-function-is-configured-for-function-level-concurrent-execution-limit.html

		149 |  resource "aws_lambda_function" "mongodb_backup_lambda" {
		150 |    filename          = "backup_mongodb.zip"
		151 |    function_name     = local.mongodb_backup_lambda_name
		152 |    source_code_hash  = "${data.archive_file.mongodb_backup_zip.output_base64sha256}"
		153 |    handler           = "mongodb_backup.lambda_handler"
		154 |    runtime           = "python3.7"
		155 |    role              = aws_iam_role.mongodb_migration_lambda_role.arn
		156 |    timeout           = 600
		157 |    memory_size       = 1024
		158 |    layers = [
		159 |       "${aws_lambda_layer_version.lambda-layer-AwsCli.arn}",
		160 |       "${aws_lambda_layer_version.lambda-layer-kubectl.arn}",
		161 |       "${aws_lambda_layer_version.lambda-layer-mongodump.arn}"
		162 |     ]
		163 |    
		164 |    environment {
		165 |      variables = {
		166 |        aws_region                        = var.aws_region
		167 |        mongodb_backup_file_name          = local.mongodb_backup_file_name
		168 |        mongodb_source_secret_name        = local.mongodb_source_secret_name
		169 |        cluster_role_arn                  = var.source_cluster_admin_role_arn
		170 |        mongodb_service_name              = local.mongodb_service_name
		171 |        mongodb_deployment_namespace      = local.mongodb_source_deployment_namespace
		172 |        mongodb_s3_bucket                 = "${aws_s3_bucket.mongodb_backup_bucket.id}"
		173 |        source_cluster_name               = local.source_cluster_name
		174 |      }
		175 |    }
		176 |  }

Check: CKV_AWS_117: "Ensure that AWS Lambda function is configured inside a VPC"
	FAILED for resource: aws_lambda_function.mongodb_backup_lambda
	File: /mongodb-migration.tf:149-176
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-general-policies/ensure-that-aws-lambda-function-is-configured-inside-a-vpc-1.html

		149 |  resource "aws_lambda_function" "mongodb_backup_lambda" {
		150 |    filename          = "backup_mongodb.zip"
		151 |    function_name     = local.mongodb_backup_lambda_name
		152 |    source_code_hash  = "${data.archive_file.mongodb_backup_zip.output_base64sha256}"
		153 |    handler           = "mongodb_backup.lambda_handler"
		154 |    runtime           = "python3.7"
		155 |    role              = aws_iam_role.mongodb_migration_lambda_role.arn
		156 |    timeout           = 600
		157 |    memory_size       = 1024
		158 |    layers = [
		159 |       "${aws_lambda_layer_version.lambda-layer-AwsCli.arn}",
		160 |       "${aws_lambda_layer_version.lambda-layer-kubectl.arn}",
		161 |       "${aws_lambda_layer_version.lambda-layer-mongodump.arn}"
		162 |     ]
		163 |    
		164 |    environment {
		165 |      variables = {
		166 |        aws_region                        = var.aws_region
		167 |        mongodb_backup_file_name          = local.mongodb_backup_file_name
		168 |        mongodb_source_secret_name        = local.mongodb_source_secret_name
		169 |        cluster_role_arn                  = var.source_cluster_admin_role_arn
		170 |        mongodb_service_name              = local.mongodb_service_name
		171 |        mongodb_deployment_namespace      = local.mongodb_source_deployment_namespace
		172 |        mongodb_s3_bucket                 = "${aws_s3_bucket.mongodb_backup_bucket.id}"
		173 |        source_cluster_name               = local.source_cluster_name
		174 |      }
		175 |    }
		176 |  }

Check: CKV_AWS_50: "X-ray tracing is enabled for Lambda"
	FAILED for resource: aws_lambda_function.mongodb_backup_lambda
	File: /mongodb-migration.tf:149-176
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-serverless-policies/bc-aws-serverless-4.html

		149 |  resource "aws_lambda_function" "mongodb_backup_lambda" {
		150 |    filename          = "backup_mongodb.zip"
		151 |    function_name     = local.mongodb_backup_lambda_name
		152 |    source_code_hash  = "${data.archive_file.mongodb_backup_zip.output_base64sha256}"
		153 |    handler           = "mongodb_backup.lambda_handler"
		154 |    runtime           = "python3.7"
		155 |    role              = aws_iam_role.mongodb_migration_lambda_role.arn
		156 |    timeout           = 600
		157 |    memory_size       = 1024
		158 |    layers = [
		159 |       "${aws_lambda_layer_version.lambda-layer-AwsCli.arn}",
		160 |       "${aws_lambda_layer_version.lambda-layer-kubectl.arn}",
		161 |       "${aws_lambda_layer_version.lambda-layer-mongodump.arn}"
		162 |     ]
		163 |    
		164 |    environment {
		165 |      variables = {
		166 |        aws_region                        = var.aws_region
		167 |        mongodb_backup_file_name          = local.mongodb_backup_file_name
		168 |        mongodb_source_secret_name        = local.mongodb_source_secret_name
		169 |        cluster_role_arn                  = var.source_cluster_admin_role_arn
		170 |        mongodb_service_name              = local.mongodb_service_name
		171 |        mongodb_deployment_namespace      = local.mongodb_source_deployment_namespace
		172 |        mongodb_s3_bucket                 = "${aws_s3_bucket.mongodb_backup_bucket.id}"
		173 |        source_cluster_name               = local.source_cluster_name
		174 |      }
		175 |    }
		176 |  }

Check: CKV_AWS_272: "Ensure AWS Lambda function is configured to validate code-signing"
	FAILED for resource: aws_lambda_function.mongodb_restore_lambda
	File: /mongodb-migration.tf:178-209

		178 |  resource "aws_lambda_function" "mongodb_restore_lambda" {
		179 |    filename          = "restore_mongodb.zip"
		180 |    function_name     = local.mongodb_restore_lambda_name
		181 |    source_code_hash  = "${data.archive_file.mongodb_restore_zip.output_base64sha256}"
		182 |    handler           = "mongodb_restore.lambda_handler"
		183 |    runtime           = "python3.7"
		184 |    role              = aws_iam_role.mongodb_migration_lambda_role.arn
		185 |    timeout           = 600
		186 |    memory_size       = 1024
		187 |    layers = [
		188 |       "${aws_lambda_layer_version.lambda-layer-AwsCli.arn}",
		189 |       "${aws_lambda_layer_version.lambda-layer-kubectl.arn}",
		190 |       "${aws_lambda_layer_version.lambda-layer-mongorestore.arn}"
		191 |     ]
		192 |    
		193 |    environment {
		194 |      variables = {
		195 |        aws_region                                = var.aws_region
		196 |        mongodb_entitlement_database_name         = local.mongodb_entitlement_database_name
		197 |        mongodb_entitlement_target_database_name  = local.mongodb_entitlement_target_database_name
		198 |        mongodb_welldelivery_database_name        = local.mongodb_welldelivery_database_name
		199 |        mongodb_welldelivery_target_database_name = local.mongodb_welldelivery_target_database_name
		200 |        mongodb_target_secret_name                = local.mongodb_target_secret_name
		201 |        mongodb_backup_file_name                  = local.mongodb_backup_file_name
		202 |        mongodb_service_name                      = local.mongodb_service_name
		203 |        mongodb_deployment_namespace              = local.mongodb_target_deployment_namespace
		204 |        mongodb_s3_bucket                         = "${aws_s3_bucket.mongodb_backup_bucket.id}"
		205 |        target_eks_cluster_name                   = var.target_eks_cluster_name
		206 |        cluster_role_arn                          = var.target_cluster_admin_role_arn
		207 |      }
		208 |    }
		209 |  }
Check: CKV_AWS_116: "Ensure that AWS Lambda function is configured for a Dead Letter Queue(DLQ)"
	FAILED for resource: aws_lambda_function.mongodb_restore_lambda
	File: /mongodb-migration.tf:178-209
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-general-policies/ensure-that-aws-lambda-function-is-configured-for-a-dead-letter-queue-dlq.html

		178 |  resource "aws_lambda_function" "mongodb_restore_lambda" {
		179 |    filename          = "restore_mongodb.zip"
		180 |    function_name     = local.mongodb_restore_lambda_name
		181 |    source_code_hash  = "${data.archive_file.mongodb_restore_zip.output_base64sha256}"
		182 |    handler           = "mongodb_restore.lambda_handler"
		183 |    runtime           = "python3.7"
		184 |    role              = aws_iam_role.mongodb_migration_lambda_role.arn
		185 |    timeout           = 600
		186 |    memory_size       = 1024
		187 |    layers = [
		188 |       "${aws_lambda_layer_version.lambda-layer-AwsCli.arn}",
		189 |       "${aws_lambda_layer_version.lambda-layer-kubectl.arn}",
		190 |       "${aws_lambda_layer_version.lambda-layer-mongorestore.arn}"
		191 |     ]
		192 |    
		193 |    environment {
		194 |      variables = {
		195 |        aws_region                                = var.aws_region
		196 |        mongodb_entitlement_database_name         = local.mongodb_entitlement_database_name
		197 |        mongodb_entitlement_target_database_name  = local.mongodb_entitlement_target_database_name
		198 |        mongodb_welldelivery_database_name        = local.mongodb_welldelivery_database_name
		199 |        mongodb_welldelivery_target_database_name = local.mongodb_welldelivery_target_database_name
		200 |        mongodb_target_secret_name                = local.mongodb_target_secret_name
		201 |        mongodb_backup_file_name                  = local.mongodb_backup_file_name
		202 |        mongodb_service_name                      = local.mongodb_service_name
		203 |        mongodb_deployment_namespace              = local.mongodb_target_deployment_namespace
		204 |        mongodb_s3_bucket                         = "${aws_s3_bucket.mongodb_backup_bucket.id}"
		205 |        target_eks_cluster_name                   = var.target_eks_cluster_name
		206 |        cluster_role_arn                          = var.target_cluster_admin_role_arn
		207 |      }
		208 |    }
		209 |  }
Check: CKV_AWS_173: "Check encryption settings for Lambda environmental variable"
	FAILED for resource: aws_lambda_function.mongodb_restore_lambda
	File: /mongodb-migration.tf:178-209
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-serverless-policies/bc-aws-serverless-5.html

		178 |  resource "aws_lambda_function" "mongodb_restore_lambda" {
		179 |    filename          = "restore_mongodb.zip"
		180 |    function_name     = local.mongodb_restore_lambda_name
		181 |    source_code_hash  = "${data.archive_file.mongodb_restore_zip.output_base64sha256}"
		182 |    handler           = "mongodb_restore.lambda_handler"
		183 |    runtime           = "python3.7"
		184 |    role              = aws_iam_role.mongodb_migration_lambda_role.arn
		185 |    timeout           = 600
		186 |    memory_size       = 1024
		187 |    layers = [
		188 |       "${aws_lambda_layer_version.lambda-layer-AwsCli.arn}",
		189 |       "${aws_lambda_layer_version.lambda-layer-kubectl.arn}",
		190 |       "${aws_lambda_layer_version.lambda-layer-mongorestore.arn}"
		191 |     ]
		192 |    
		193 |    environment {
		194 |      variables = {
		195 |        aws_region                                = var.aws_region
		196 |        mongodb_entitlement_database_name         = local.mongodb_entitlement_database_name
		197 |        mongodb_entitlement_target_database_name  = local.mongodb_entitlement_target_database_name
		198 |        mongodb_welldelivery_database_name        = local.mongodb_welldelivery_database_name
		199 |        mongodb_welldelivery_target_database_name = local.mongodb_welldelivery_target_database_name
		200 |        mongodb_target_secret_name                = local.mongodb_target_secret_name
		201 |        mongodb_backup_file_name                  = local.mongodb_backup_file_name
		202 |        mongodb_service_name                      = local.mongodb_service_name
		203 |        mongodb_deployment_namespace              = local.mongodb_target_deployment_namespace
		204 |        mongodb_s3_bucket                         = "${aws_s3_bucket.mongodb_backup_bucket.id}"
		205 |        target_eks_cluster_name                   = var.target_eks_cluster_name
		206 |        cluster_role_arn                          = var.target_cluster_admin_role_arn
		207 |      }
		208 |    }
		209 |  }
Check: CKV_AWS_115: "Ensure that AWS Lambda function is configured for function-level concurrent execution limit"
	FAILED for resource: aws_lambda_function.mongodb_restore_lambda
	File: /mongodb-migration.tf:178-209
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-general-policies/ensure-that-aws-lambda-function-is-configured-for-function-level-concurrent-execution-limit.html

		178 |  resource "aws_lambda_function" "mongodb_restore_lambda" {
		179 |    filename          = "restore_mongodb.zip"
		180 |    function_name     = local.mongodb_restore_lambda_name
		181 |    source_code_hash  = "${data.archive_file.mongodb_restore_zip.output_base64sha256}"
		182 |    handler           = "mongodb_restore.lambda_handler"
		183 |    runtime           = "python3.7"
		184 |    role              = aws_iam_role.mongodb_migration_lambda_role.arn
		185 |    timeout           = 600
		186 |    memory_size       = 1024
		187 |    layers = [
		188 |       "${aws_lambda_layer_version.lambda-layer-AwsCli.arn}",
		189 |       "${aws_lambda_layer_version.lambda-layer-kubectl.arn}",
		190 |       "${aws_lambda_layer_version.lambda-layer-mongorestore.arn}"
		191 |     ]
		192 |    
		193 |    environment {
		194 |      variables = {
		195 |        aws_region                                = var.aws_region
		196 |        mongodb_entitlement_database_name         = local.mongodb_entitlement_database_name
		197 |        mongodb_entitlement_target_database_name  = local.mongodb_entitlement_target_database_name
		198 |        mongodb_welldelivery_database_name        = local.mongodb_welldelivery_database_name
		199 |        mongodb_welldelivery_target_database_name = local.mongodb_welldelivery_target_database_name
		200 |        mongodb_target_secret_name                = local.mongodb_target_secret_name
		201 |        mongodb_backup_file_name                  = local.mongodb_backup_file_name
		202 |        mongodb_service_name                      = local.mongodb_service_name
		203 |        mongodb_deployment_namespace              = local.mongodb_target_deployment_namespace
		204 |        mongodb_s3_bucket                         = "${aws_s3_bucket.mongodb_backup_bucket.id}"
		205 |        target_eks_cluster_name                   = var.target_eks_cluster_name
		206 |        cluster_role_arn                          = var.target_cluster_admin_role_arn
		207 |      }
		208 |    }
		209 |  }
Check: CKV_AWS_117: "Ensure that AWS Lambda function is configured inside a VPC"
	FAILED for resource: aws_lambda_function.mongodb_restore_lambda
	File: /mongodb-migration.tf:178-209
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-general-policies/ensure-that-aws-lambda-function-is-configured-inside-a-vpc-1.html

		178 |  resource "aws_lambda_function" "mongodb_restore_lambda" {
		179 |    filename          = "restore_mongodb.zip"
		180 |    function_name     = local.mongodb_restore_lambda_name
		181 |    source_code_hash  = "${data.archive_file.mongodb_restore_zip.output_base64sha256}"
		182 |    handler           = "mongodb_restore.lambda_handler"
		183 |    runtime           = "python3.7"
		184 |    role              = aws_iam_role.mongodb_migration_lambda_role.arn
		185 |    timeout           = 600
		186 |    memory_size       = 1024
		187 |    layers = [
		188 |       "${aws_lambda_layer_version.lambda-layer-AwsCli.arn}",
		189 |       "${aws_lambda_layer_version.lambda-layer-kubectl.arn}",
		190 |       "${aws_lambda_layer_version.lambda-layer-mongorestore.arn}"
		191 |     ]
		192 |    
		193 |    environment {
		194 |      variables = {
		195 |        aws_region                                = var.aws_region
		196 |        mongodb_entitlement_database_name         = local.mongodb_entitlement_database_name
		197 |        mongodb_entitlement_target_database_name  = local.mongodb_entitlement_target_database_name
		198 |        mongodb_welldelivery_database_name        = local.mongodb_welldelivery_database_name
		199 |        mongodb_welldelivery_target_database_name = local.mongodb_welldelivery_target_database_name
		200 |        mongodb_target_secret_name                = local.mongodb_target_secret_name
		201 |        mongodb_backup_file_name                  = local.mongodb_backup_file_name
		202 |        mongodb_service_name                      = local.mongodb_service_name
		203 |        mongodb_deployment_namespace              = local.mongodb_target_deployment_namespace
		204 |        mongodb_s3_bucket                         = "${aws_s3_bucket.mongodb_backup_bucket.id}"
		205 |        target_eks_cluster_name                   = var.target_eks_cluster_name
		206 |        cluster_role_arn                          = var.target_cluster_admin_role_arn
		207 |      }
		208 |    }
		209 |  }
Check: CKV_AWS_50: "X-ray tracing is enabled for Lambda"
	FAILED for resource: aws_lambda_function.mongodb_restore_lambda
	File: /mongodb-migration.tf:178-209
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-serverless-policies/bc-aws-serverless-4.html

		178 |  resource "aws_lambda_function" "mongodb_restore_lambda" {
		179 |    filename          = "restore_mongodb.zip"
		180 |    function_name     = local.mongodb_restore_lambda_name
		181 |    source_code_hash  = "${data.archive_file.mongodb_restore_zip.output_base64sha256}"
		182 |    handler           = "mongodb_restore.lambda_handler"
		183 |    runtime           = "python3.7"
		184 |    role              = aws_iam_role.mongodb_migration_lambda_role.arn
		185 |    timeout           = 600
		186 |    memory_size       = 1024
		187 |    layers = [
		188 |       "${aws_lambda_layer_version.lambda-layer-AwsCli.arn}",
		189 |       "${aws_lambda_layer_version.lambda-layer-kubectl.arn}",
		190 |       "${aws_lambda_layer_version.lambda-layer-mongorestore.arn}"
		191 |     ]
		192 |    
		193 |    environment {
		194 |      variables = {
		195 |        aws_region                                = var.aws_region
		196 |        mongodb_entitlement_database_name         = local.mongodb_entitlement_database_name
		197 |        mongodb_entitlement_target_database_name  = local.mongodb_entitlement_target_database_name
		198 |        mongodb_welldelivery_database_name        = local.mongodb_welldelivery_database_name
		199 |        mongodb_welldelivery_target_database_name = local.mongodb_welldelivery_target_database_name
		200 |        mongodb_target_secret_name                = local.mongodb_target_secret_name
		201 |        mongodb_backup_file_name                  = local.mongodb_backup_file_name
		202 |        mongodb_service_name                      = local.mongodb_service_name
		203 |        mongodb_deployment_namespace              = local.mongodb_target_deployment_namespace
		204 |        mongodb_s3_bucket                         = "${aws_s3_bucket.mongodb_backup_bucket.id}"
		205 |        target_eks_cluster_name                   = var.target_eks_cluster_name
		206 |        cluster_role_arn                          = var.target_cluster_admin_role_arn
		207 |      }
		208 |    }
		209 |  }
Check: CKV_AWS_272: "Ensure AWS Lambda function is configured to validate code-signing"
	FAILED for resource: aws_lambda_function.get_source_dest_lambda
	File: /s3-migration.tf:339-348

		339 | resource "aws_lambda_function" "get_source_dest_lambda" {
		340 |   filename      = "get-source-dest-entities.zip"
		341 |   function_name = local.get_source_dest_lambda_name
		342 |   role          = aws_iam_role.get_entities_role.arn
		343 |   timeout       = 300
		344 |   memory_size   = 2048
		345 |   handler       = "main.lambda_handler"
		346 |   source_code_hash = data.archive_file.s3_get_buckets.output_base64sha256
		347 |   runtime = "python3.9"
		348 | }

Check: CKV_AWS_116: "Ensure that AWS Lambda function is configured for a Dead Letter Queue(DLQ)"
	FAILED for resource: aws_lambda_function.get_source_dest_lambda
	File: /s3-migration.tf:339-348
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-general-policies/ensure-that-aws-lambda-function-is-configured-for-a-dead-letter-queue-dlq.html

		339 | resource "aws_lambda_function" "get_source_dest_lambda" {
		340 |   filename      = "get-source-dest-entities.zip"
		341 |   function_name = local.get_source_dest_lambda_name
		342 |   role          = aws_iam_role.get_entities_role.arn
		343 |   timeout       = 300
		344 |   memory_size   = 2048
		345 |   handler       = "main.lambda_handler"
		346 |   source_code_hash = data.archive_file.s3_get_buckets.output_base64sha256
		347 |   runtime = "python3.9"
		348 | }

Check: CKV_AWS_115: "Ensure that AWS Lambda function is configured for function-level concurrent execution limit"
	FAILED for resource: aws_lambda_function.get_source_dest_lambda
	File: /s3-migration.tf:339-348
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-general-policies/ensure-that-aws-lambda-function-is-configured-for-function-level-concurrent-execution-limit.html

		339 | resource "aws_lambda_function" "get_source_dest_lambda" {
		340 |   filename      = "get-source-dest-entities.zip"
		341 |   function_name = local.get_source_dest_lambda_name
		342 |   role          = aws_iam_role.get_entities_role.arn
		343 |   timeout       = 300
		344 |   memory_size   = 2048
		345 |   handler       = "main.lambda_handler"
		346 |   source_code_hash = data.archive_file.s3_get_buckets.output_base64sha256
		347 |   runtime = "python3.9"
		348 | }

Check: CKV_AWS_117: "Ensure that AWS Lambda function is configured inside a VPC"
	FAILED for resource: aws_lambda_function.get_source_dest_lambda
	File: /s3-migration.tf:339-348
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-general-policies/ensure-that-aws-lambda-function-is-configured-inside-a-vpc-1.html

		339 | resource "aws_lambda_function" "get_source_dest_lambda" {
		340 |   filename      = "get-source-dest-entities.zip"
		341 |   function_name = local.get_source_dest_lambda_name
		342 |   role          = aws_iam_role.get_entities_role.arn
		343 |   timeout       = 300
		344 |   memory_size   = 2048
		345 |   handler       = "main.lambda_handler"
		346 |   source_code_hash = data.archive_file.s3_get_buckets.output_base64sha256
		347 |   runtime = "python3.9"
		348 | }

Check: CKV_AWS_50: "X-ray tracing is enabled for Lambda"
	FAILED for resource: aws_lambda_function.get_source_dest_lambda
	File: /s3-migration.tf:339-348
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-serverless-policies/bc-aws-serverless-4.html

		339 | resource "aws_lambda_function" "get_source_dest_lambda" {
		340 |   filename      = "get-source-dest-entities.zip"
		341 |   function_name = local.get_source_dest_lambda_name
		342 |   role          = aws_iam_role.get_entities_role.arn
		343 |   timeout       = 300
		344 |   memory_size   = 2048
		345 |   handler       = "main.lambda_handler"
		346 |   source_code_hash = data.archive_file.s3_get_buckets.output_base64sha256
		347 |   runtime = "python3.9"
		348 | }

Check: CKV2_AWS_6: "Ensure that S3 bucket has a Public Access block"
	FAILED for resource: aws_s3_bucket.mongodb_backup_bucket
	File: /mongodb-migration.tf:13-16
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-networking-policies/s3-bucket-should-have-public-access-blocks-defaults-to-false-if-the-public-access-block-is-not-attached.html

		13 | resource "aws_s3_bucket" "mongodb_backup_bucket" {
		14 |   bucket_prefix = "mongodb-backup-bucket"
		15 |   force_destroy = true
		16 | }

Check: CKV2_AWS_6: "Ensure that S3 bucket has a Public Access block"
	FAILED for resource: aws_s3_bucket.report_bucket
	File: /s3-migration.tf:351-354
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-networking-policies/s3-bucket-should-have-public-access-blocks-defaults-to-false-if-the-public-access-block-is-not-attached.html

		351 | resource "aws_s3_bucket" "report_bucket" {
		352 |   bucket_prefix = "report-bucket"
		353 |   force_destroy = true
		354 | }

Check: CKV_AWS_144: "Ensure that S3 bucket has cross-region replication enabled"
	FAILED for resource: aws_s3_bucket.mongodb_backup_bucket
	File: /mongodb-migration.tf:13-16
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-general-policies/ensure-that-s3-bucket-has-cross-region-replication-enabled.html

		13 | resource "aws_s3_bucket" "mongodb_backup_bucket" {
		14 |   bucket_prefix = "mongodb-backup-bucket"
		15 |   force_destroy = true
		16 | }

Check: CKV_AWS_144: "Ensure that S3 bucket has cross-region replication enabled"
	FAILED for resource: aws_s3_bucket.report_bucket
	File: /s3-migration.tf:351-354
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-general-policies/ensure-that-s3-bucket-has-cross-region-replication-enabled.html

		351 | resource "aws_s3_bucket" "report_bucket" {
		352 |   bucket_prefix = "report-bucket"
		353 |   force_destroy = true
		354 | }

Check: CKV_AWS_21: "Ensure all data stored in the S3 bucket have versioning enabled"
	FAILED for resource: aws_s3_bucket.mongodb_backup_bucket
	File: /mongodb-migration.tf:13-16
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/s3-policies/s3-16-enable-versioning.html

		13 | resource "aws_s3_bucket" "mongodb_backup_bucket" {
		14 |   bucket_prefix = "mongodb-backup-bucket"
		15 |   force_destroy = true
		16 | }

Check: CKV_AWS_18: "Ensure the S3 bucket has access logging enabled"
	FAILED for resource: aws_s3_bucket.mongodb_backup_bucket
	File: /mongodb-migration.tf:13-16
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/s3-policies/s3-13-enable-logging.html

		13 | resource "aws_s3_bucket" "mongodb_backup_bucket" {
		14 |   bucket_prefix = "mongodb-backup-bucket"
		15 |   force_destroy = true
		16 | }

Check: CKV_AWS_18: "Ensure the S3 bucket has access logging enabled"
	FAILED for resource: aws_s3_bucket.report_bucket
	File: /s3-migration.tf:351-354
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/s3-policies/s3-13-enable-logging.html

		351 | resource "aws_s3_bucket" "report_bucket" {
		352 |   bucket_prefix = "report-bucket"
		353 |   force_destroy = true
		354 | }

Check: CKV_AWS_145: "Ensure that S3 buckets are encrypted with KMS by default"
	FAILED for resource: aws_s3_bucket.mongodb_backup_bucket
	File: /mongodb-migration.tf:13-16
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-general-policies/ensure-that-s3-buckets-are-encrypted-with-kms-by-default.html

		13 | resource "aws_s3_bucket" "mongodb_backup_bucket" {
		14 |   bucket_prefix = "mongodb-backup-bucket"
		15 |   force_destroy = true
		16 | }

Check: CKV_AWS_145: "Ensure that S3 buckets are encrypted with KMS by default"
	FAILED for resource: aws_s3_bucket.report_bucket
	File: /s3-migration.tf:351-354
	Guide: https://docs.paloaltonetworks.com/content/techdocs/en_US/prisma/prisma-cloud/prisma-cloud-code-security-policy-reference/aws-policies/aws-general-policies/ensure-that-s3-buckets-are-encrypted-with-kms-by-default.html

		351 | resource "aws_s3_bucket" "report_bucket" {
		352 |   bucket_prefix = "report-bucket"
		353 |   force_destroy = true
		354 | }

Check: CKV2_AWS_61: "Ensure that an S3 bucket has a lifecycle configuration"
	FAILED for resource: aws_s3_bucket.mongodb_backup_bucket
	File: /mongodb-migration.tf:13-16

		13 | resource "aws_s3_bucket" "mongodb_backup_bucket" {
		14 |   bucket_prefix = "mongodb-backup-bucket"
		15 |   force_destroy = true
		16 | }

Check: CKV2_AWS_61: "Ensure that an S3 bucket has a lifecycle configuration"
	FAILED for resource: aws_s3_bucket.report_bucket
	File: /s3-migration.tf:351-354

		351 | resource "aws_s3_bucket" "report_bucket" {
		352 |   bucket_prefix = "report-bucket"
		353 |   force_destroy = true
		354 | }

Check: CKV2_AWS_62: "Ensure S3 buckets should have event notifications enabled"
	FAILED for resource: aws_s3_bucket.mongodb_backup_bucket
	File: /mongodb-migration.tf:13-16

		13 | resource "aws_s3_bucket" "mongodb_backup_bucket" {
		14 |   bucket_prefix = "mongodb-backup-bucket"
		15 |   force_destroy = true
		16 | }

Check: CKV2_AWS_62: "Ensure S3 buckets should have event notifications enabled"
	FAILED for resource: aws_s3_bucket.report_bucket
	File: /s3-migration.tf:351-354

		351 | resource "aws_s3_bucket" "report_bucket" {
		352 |   bucket_prefix = "report-bucket"
		353 |   force_destroy = true
		354 | }


