Merge branch 'main' of https://github.com/HicResearch/TREEHOOSE into …

…main
HicResearch · May 20, 2022 · 4d043f5 · 4d043f5
2 parents 1a35273 + 0226991
commit 4d043f5
Showing 1 changed file with 15 additions and 3 deletions.
diff --git a/src/components/egress_app_backend/egress_backend/egress_backend_stack.py b/src/components/egress_app_backend/egress_backend/egress_backend_stack.py
@@ -1516,12 +1516,24 @@ def __init__(
         )
         NagSuppressions.add_resource_suppressions(
             egress_webapp_redeploy_lambda_policy,
-            [{"id": "AwsSolutions-IAM5", "reason": "Wilcard permissions are expected"}],
+            [
+                {
+                    "id": "AwsSolutions-IAM5",
+                    "reason": "Policy is already restricted to a specific resource and usage of \
+                        wildcard inside the resource is allowed.",
+                }
+            ],
             True,
         )
         NagSuppressions.add_resource_suppressions(
             egress_webapp_redeploy_lambda_role,
-            [{"id": "AwsSolutions-IAM5", "reason": "Wilcard permissions are expected"}],
+            [
+                {
+                    "id": "AwsSolutions-IAM5",
+                    "reason": "Policy is already restricted to a specific resource and usage of \
+                        wildcard inside the resource is allowed.",
+                }
+            ],
             True,
         )
         NagSuppressions.add_resource_suppressions(
@@ -1551,7 +1563,7 @@ def __init__(
             [
                 {
                     "id": "AwsSolutions-IAM5",
-                    "reason": "Wilcard permissions are required for S3 notifications",
+                    "reason": "Wildcard permissions are required for S3 notifications",
                 }
             ],
             True,