rage.fail

aws-acm-contains-certificate

explicit aws emits Contains

match (record)

{ "field": "CertificateArn", "resource_type": "AWS::CertificateManager::Certificate" }

emit

source type	`AdministrativeBoundary`
target type	`*`
source	`<account/region administrative boundary>`
target	`<certificate node>`

Narrative

Certificate {cert.name} exists in {account}/{region}.

Raw rule rules/explicit/aws-acm.yaml

id: aws-acm-contains-certificate
emits: Contains
applies_to:
- aws
match_record:
  resource_type: AWS::CertificateManager::Certificate
  field: CertificateArn
emit:
  source_type: AdministrativeBoundary
  target_type: '*'
  source: <account/region administrative boundary>
  target: <certificate node>
  api_source: acm:ListCertificates
  evidence_field: CertificateArn
  narrative: Certificate {cert.name} exists in {account}/{region}.