Skip to main content

Module hardcoded_az

Module hardcoded_az 

Source
Expand description

Shared detection of hardcoded availability zones, so both rule engines emit identical findings from one implementation instead of two that can drift.

Structs§

HardcodedAz

Constants§

AZ_PATHS
Resource types mapped to the property descriptor whose value is a hardcoded availability-zone name to flag. A descriptor is a .-separated path under Properties with two wildcard segments:

Functions§

find
Values produced by intrinsics (Fn::GetAZs, Ref, …) are skipped: those are not hardcoded even when they resolve to a concrete zone.
message