π§ AWS ElastiCache Replication Group is not encrypted in-transit - prod.logic.yamlπ’
- Contextual name: π§ prod.logic.yamlπ’
- ID:
/ce/ca/aws/elasticache/replication-group-in-transit-encryption/prod.logic.yaml - Tags:
- π’ Logic test success
- π’ Logic with extracts
- π’ Logic with test data
Usesβ
- π AWS ElastiCache Replication Group
- π AWS ElastiCache Replication Group - object.extracts.yaml
- π§ͺ test-data.json
Test Results π’β
Generated at: 2025-11-17T14:33:36.246616201Z Open
| Result | Id | Condition Index | Condition Text | Runtime Error |
|---|---|---|---|---|
| π’ | test1 | βοΈ 99 | βοΈ isDisappeared(CA10__disappearanceTime__c) | βοΈ null |
| π’ | test2 | βοΈ 199 | βοΈ extract('CA10__status__c') != 'available' | βοΈ null |
| π’ | test3 | βοΈ 299 | βοΈ not(extract('CA10__transitEncryptionEnabled__c')) | βοΈ null |
| π’ | test4 | βοΈ 300 | βοΈ otherwise | βοΈ null |
Generation Bundleβ
| File | MD5 | |
|---|---|---|
| Open | /ce/ca/aws/elasticache/replication-group-in-transit-encryption/policy.yaml | B223BD73A26B00B2FDB04AD4C591E4EE |
| Open | /ce/ca/aws/elasticache/replication-group-in-transit-encryption/prod.logic.yaml | 32170B9C916C434CF35A2608CF934B03 |
| Open | /ce/ca/aws/elasticache/replication-group-in-transit-encryption/test-data.json | 4AD3AA6EB7AC3676572859CB14AFFD53 |
| Open | /types/CA10__CaAwsCacheReplicationGroup__c/object.extracts.yaml | 05D6F73A1FB17B4733BA531296051FB4 |
Available Commandsβ
repo-manager policies generate FULL /ce/ca/aws/elasticache/replication-group-in-transit-encryption/prod.logic.yaml
repo-manager policies generate DEBUG /ce/ca/aws/elasticache/replication-group-in-transit-encryption/prod.logic.yaml
repo-manager policies generate CAPTURE_TEST_DATA /ce/ca/aws/elasticache/replication-group-in-transit-encryption/prod.logic.yaml
repo-manager policies generate TESTS /ce/ca/aws/elasticache/replication-group-in-transit-encryption/prod.logic.yaml
# Execute tests
repo-manager policies test /ce/ca/aws/elasticache/replication-group-in-transit-encryption/prod.logic.yaml
Contentβ
---
inputType: "CA10__CaAwsCacheReplicationGroup__c"
testData:
- file: "test-data.json"
importExtracts:
- file: /types/CA10__CaAwsCacheReplicationGroup__c/object.extracts.yaml
conditions:
- status: "INAPPLICABLE"
currentStateMessage: "The Replication Group is not available."
check:
NOT_EQUAL:
left:
EXTRACT: "CA10__status__c"
right:
TEXT: "available"
- status: "INCOMPLIANT"
currentStateMessage: "In-transit encryption is not enabled for this Replication Group."
remediationMessage: "Consider enabling in-transit encryption for the Replication Group."
check:
NOT:
arg:
EXTRACT: "CA10__transitEncryptionEnabled__c"
otherwise:
status: "COMPLIANT"
currentStateMessage: "In-transit encryption is enabled for this Replication Group."