updated deprecated variables

[h1manshu98]

what

• Updated deprecated variables in aws_iam_policy_document and syntax in their values:

1. source_json to source_policy_documents
2. override_json to override_policy_documents

[github-advanced-security]

You have successfully added a new defsec configuration .github/workflows/tfsec.yml:tfsec. As part of the setup process, we have scanned this repository and found no existing alerts. In the future, you will see all code scanning alerts on the repository Security tab.

[clouddrove-ci]

Terraform Security Scan Failed

Show Output

Result #1 LOW Repository is not encrypted using KMS. 
────────────────────────────────────────────────────────────────────────────────
  main.tf:29-54
────────────────────────────────────────────────────────────────────────────────
   29  ┌ resource "aws_ecr_repository" "default" {
   30  │   count                = var.enabled_ecr ? 1 : 0
   31  │   name                 = module.labels.id
   32  │   tags                 = module.labels.tags
   33  │   image_tag_mutability = var.image_tag_mutability
   34  │ 
   35  │   dynamic "encryption_configuration" {
   36  │     for_each = var.encryption_configuration != null ? [var.encryption_configuration] : []
   37  └     content {
   ..  
────────────────────────────────────────────────────────────────────────────────
          ID aws-ecr-repository-customer-key
      Impact Using AWS managed keys does not allow for fine grained control
  Resolution Use customer managed keys

  More Information
  - https://aquasecurity.github.io/tfsec/latest/checks/aws/ecr/repository-customer-key/
  - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/ecr_repository#encryption_configuration
────────────────────────────────────────────────────────────────────────────────


  timings
  ──────────────────────────────────────────
  disk i/o             79.105µs
  parsing              237.727468ms
  adaptation           87.305µs
  checks               10.036045ms
  total                247.929923ms

  counts
  ──────────────────────────────────────────
  modules downloaded   0
  modules processed    1
  blocks processed     32
  files read           3

  results
  ──────────────────────────────────────────
  passed               3
  ignored              1
  critical             0
  high                 0
  medium               0
  low                  1

  3 passed, 1 ignored, 1 potential problem(s) detected.