AWSAT005

README

AWSAT005

The AWSAT005 analyzer reports hardcoded AWS partitions in ARNs. For tests to work across AWS partitions, the partitions should not be hardcoded.

Flagged Code

func testAccEC2SpotFleetRequestConfig(role string) string {
	return fmt.Sprintf(`
resource "aws_iam_role_policy_attachment" "test-AmazonEKSClusterPolicy" {
  policy_arn = "arn:aws:iam::aws:policy/AmazonEKSClusterPolicy"
  role       = %q
}
`, role)
}

Passing Code

func testAccEC2SpotFleetRequestConfig(role string) string {
    return fmt.Sprintf(`
data "aws_partition" "current" {}

resource "aws_iam_role_policy_attachment" "test-AmazonEKSClusterPolicy" {
  policy_arn = "arn:${data.aws_partition.current.partition}:iam::aws:policy/AmazonEKSClusterPolicy"
  role       = %q
}
`, role)
}

Ignoring Reports

Singular reports can be ignored by adding the a //lintignore:AWSAT005 Go code comment at the end of the offending line or on the line immediately proceding, e.g.

policy_arn = "arn:aws:iam::aws:policy/AmazonEKSClusterPolicy" //lintignore:AWSAT005

Documentation

Overview

Package AWSAT005 defines an Analyzer that checks for hardcoded AWS partitions in ARNs

Index

• Constants
• Variables

Constants

const Doc = `` /* 189-byte string literal not displayed */

Variables

var Analyzer = &analysis.Analyzer{
	Name: analyzerName,
	Doc:  Doc,
	Requires: []*analysis.Analyzer{
		commentignore.Analyzer,
		inspect.Analyzer,
	},
	Run: run,
}