{
	"results": [
		{
			"rule_id": "AWS006",
			"rule_description": "An ingress security group rule allows traffic from /0.",
			"rule_provider": "aws",
			"link": "See https://tfsec.dev/docs/aws/AWS006/ for more information.",
			"location": {
				"filename": "/home/billybob/supertfsec/example/main.tf",
				"start_line": 4,
				"end_line": 4
			},
			"description": "Resource 'aws_security_group_rule.my-rule' defines a fully open ingress security group rule.",
			"impact": "Your port exposed to the internet",
			"resolution": "Set a more restrictive cidr range",
			"severity": "WARNING",
			"passed": false
		},
		{
			"rule_id": "AZU003",
			"rule_description": "Unencrypted managed disk.",
			"rule_provider": "azure",
			"link": "See https://tfsec.dev/docs/azure/AZU003/ for more information.",
			"location": {
				"filename": "/home/billybob/supertfsec/example/main.tf",
				"start_line": 22,
				"end_line": 22
			},
			"description": "Resource 'azurerm_managed_disk.source' defines an unencrypted managed disk.",
			"impact": "",
			"resolution": "",
			"severity": "ERROR",
			"passed": false
		},
		{
			"rule_id": "AWS025",
			"rule_description": "API Gateway domain name uses outdated SSL/TLS protocols.",
			"rule_provider": "aws",
			"link": "See https://tfsec.dev/docs/aws/AWS025/ for more information.",
			"location": {
				"filename": "/home/billybob/supertfsec/example/main.tf",
				"start_line": 26,
				"end_line": 27
			},
			"description": "Resource 'aws_api_gateway_domain_name.missing_security_policy' should include security_policy (defauls to outdated SSL/TLS policy).",
			"impact": "Outdated SSL policies increase exposure to known vulnerabilites",
			"resolution": "Use the most modern TLS/SSL policies available",
			"severity": "ERROR",
			"passed": false
		},
		{
			"rule_id": "AWS025",
			"rule_description": "API Gateway domain name uses outdated SSL/TLS protocols.",
			"rule_provider": "aws",
			"link": "See https://tfsec.dev/docs/aws/AWS025/ for more information.",
			"location": {
				"filename": "/home/billybob/supertfsec/example/main.tf",
				"start_line": 30,
				"end_line": 30
			},
			"description": "Resource 'aws_api_gateway_domain_name.empty_security_policy' defines outdated SSL/TLS policies (not using TLS_1_2).",
			"impact": "Outdated SSL policies increase exposure to known vulnerabilites",
			"resolution": "Use the most modern TLS/SSL policies available",
			"severity": "ERROR",
			"passed": false
		},
		{
			"rule_id": "AWS025",
			"rule_description": "API Gateway domain name uses outdated SSL/TLS protocols.",
			"rule_provider": "aws",
			"link": "See https://tfsec.dev/docs/aws/AWS025/ for more information.",
			"location": {
				"filename": "/home/billybob/supertfsec/example/main.tf",
				"start_line": 34,
				"end_line": 34
			},
			"description": "Resource 'aws_api_gateway_domain_name.outdated_security_policy' defines outdated SSL/TLS policies (not using TLS_1_2).",
			"impact": "Outdated SSL policies increase exposure to known vulnerabilites",
			"resolution": "Use the most modern TLS/SSL policies available",
			"severity": "ERROR",
			"passed": false
		},
		{
			"rule_id": "AWS018",
			"rule_description": "Missing description for security group/security group rule.",
			"rule_provider": "aws",
			"link": "See https://tfsec.dev/docs/aws/AWS018/ for more information.",
			"location": {
				"filename": "/home/billybob/supertfsec/example/main.tf",
				"start_line": 2,
				"end_line": 5
			},
			"description": "Resource 'aws_security_group_rule.my-rule' should include a description for auditing purposes.",
			"impact": "Descriptions provide context for the firewall rule reasons",
			"resolution": "Add descriptions for all security groups anf rules",
			"severity": "ERROR",
			"passed": false
		},
		{
			"rule_id": "AWS004",
			"rule_description": "Use of plain HTTP.",
			"rule_provider": "aws",
			"link": "See https://tfsec.dev/docs/aws/AWS004/ for more information.",
			"location": {
				"filename": "/home/billybob/supertfsec/example/main.tf",
				"start_line": 9,
				"end_line": 9
			},
			"description": "Resource 'aws_alb_listener.my-alb-listener' uses plain HTTP instead of HTTPS.",
			"impact": "Your traffic is not protected",
			"resolution": "Switch to HTTPS to benefit from TLS security features",
			"severity": "ERROR",
			"passed": false
		},
		{
			"rule_id": "AWS003",
			"rule_description": "AWS Classic resource usage.",
			"rule_provider": "aws",
			"link": "See https://tfsec.dev/docs/aws/AWS003/ for more information.",
			"location": {
				"filename": "/home/billybob/supertfsec/example/main.tf",
				"start_line": 12,
				"end_line": 14
			},
			"description": "Resource 'aws_db_security_group.my-group' uses EC2 Classic. Use a VPC instead.",
			"impact": "Classic resources are running in a shared environment with other customers",
			"resolution": "Switch to VPC resources",
			"severity": "ERROR",
			"passed": false
		},
		{
			"rule_id": "AWS092",
			"rule_description": "DynamoDB tables should use at rest encyption with a Customer Managed Key",
			"rule_provider": "aws",
			"link": "See https://tfsec.dev/docs/aws/AWS092/ for more information.",
			"location": {
				"filename": "/home/billybob/supertfsec/example/main.tf",
				"start_line": 41,
				"end_line": 56
			},
			"description": "Resource 'aws_dynamodb_table.bad_example' is not using KMS CMK for encryption",
			"impact": "Using AWS managed keys does not allow for fine grained control",
			"resolution": "Enable server side encrytion with a customer managed key",
			"severity": "WARNING",
			"passed": false
		}
	]
}