Fix for nccgroup#913

rajivraj · Nov 12, 2020 · 94b41da · 94b41da
1 parent d9541de
commit 94b41da
Showing 1 changed file with 16 additions and 7 deletions.
diff --git a/ScoutSuite/providers/aws/rules/findings/cloudtrail-no-encryption-with-kms.json b/ScoutSuite/providers/aws/rules/findings/cloudtrail-no-encryption-with-kms.json
@@ -26,24 +26,33 @@
     "display_path": "cloudtrail.regions.id.trails.id",
     "path": "cloudtrail.regions.id.trails.id",
     "conditions": [
-        "or",
+        "and",
         [
             "cloudtrail.regions.id.trails.id.",
             "withoutKey",
-            "KmsKeyId"
+            "scout_link"
         ],
         [
-            "and",
+            "or",
             [
                 "cloudtrail.regions.id.trails.id.",
-                "withKey",
+                "withoutKey",
                 "KmsKeyId"
             ],
             [
-                "cloudtrail.regions.id.trails.id.KmsKeyId",
-                "null",
-                ""
+                "and",
+                [
+                    "cloudtrail.regions.id.trails.id.",
+                    "withKey",
+                    "KmsKeyId"
+                ],
+                [
+                    "cloudtrail.regions.id.trails.id.KmsKeyId",
+                    "null",
+                    ""
+                ]
             ]
+
         ]
     ],
     "id_suffix": "cloudtrail-kms-key-unused"