mcp-server-semgrep/semgrep-rules/terraform/aws/best-practice/aws-qldb-inadequate-ledger-permissions-mode.yaml

MCP Server for Semgrep Integration - static code analysis with AI

rules:
- id: aws-qldb-inadequate-ledger-permissions-mode
  patterns:
    - pattern: |
        resource "aws_qldb_ledger" $ANYTHING {
          ...
          permissions_mode = "ALLOW_ALL"
          ...
        }
  message: >-
    The AWS QLDB ledger permissions are too permissive. Consider using "'STANDARD'" permissions mode if possible.
  languages: [hcl]
  severity: WARNING
  metadata:
    category: best-practice
    technology:
    - terraform
    - aws