RDS Data Security policy incorrect policy description

[cesar-rodriguez]

• terrascan version: v1.3.2
• Operating System: Any

Description

The description of AWS.RDS.DataSecurity.High.0414.json doesn't match what the associated rego policies does. This policy is checking weather the database instance has been encrypted, but the message is indicating that automated backups aren't enabled.

What I Did

Example terraform:

resource "aws_db_instance" "secureInstance" {
  allocated_storage                   = 20
  storage_type                        = "gp2"
  engine                              = "mysql"
  engine_version                      = "5.7"
  instance_class                      = "db.t2.micro"
  name                                = "mydb"
  backup_retention_period             = 90
  iam_database_authentication_enabled = true
  auto_minor_version_upgrade          = true
}

Here's the error message from Terrascan but as you can see above "backup_retention_period" was specified. What's missing is "kms_key_id".

$ terrascan scan -t aws .                


Violation Details -
    
        Description    :        Ensure that your RDS database instances have automated backups enabled for point-in-time recovery. To back up your database instances, AWS RDS take automatically a full daily snapshot of your data (with transactions logs) during the specified backup window and keeps the backups for a limited period of time (known as retention period) defined by the instance owner.
        File           :        aws_db_instance.tf
        Line           :        5
        Severity       :        HIGH
        -----------------------------------------------------------------------


Scan Summary -

        File/Folder         :   /Users/therasec/programming/test_dirs/success
        IaC Type            :   terraform
        Scanned At          :   2021-02-04 03:04:00.301155 +0000 UTC
        Policies Validated  :   149
        Violated Policies   :   1
        Low                 :   0
        Medium              :   0
        High                :   1

[cesar-rodriguez]

Fixed in #542