Unable to mute all resources based on resource name OR tags

[KieranP]

Currently cannot mute all resources based on resource name OR tags.

Current mutelist functionality only supports resource name AND tags.

This only works when resource AND tags are true:

Mutelist:
  Accounts:
    '*':
      Checks:
        '*':
          Regions:
            - '*'
          Resources:
            - '*bucketav*'
          Tags:
            - 'Name=*bucketav*'

I need a solution to mute if resource OR tags are true.

Providing multiple checks with same name doesn't work:

Mutelist:
  Accounts:
    '*':
      Checks:
        '*':
          Regions:
            - '*'
          Resources:
            - '*bucketav*'
        '*':
          Regions:
            - '*'
          Resources:
            - '*'
          Tags:
            - 'Name=*bucketav*'

The above only takes into account the second, i.e. it overrides.

There does not appear to be any way to accomplish this currently?

[jfagoagas]

Hello @KieranP as you mentioned there is no way to use resources or tags for the same Mutelist check block. We need to review the current implementation to see how can we achieve it. We'll get back to you once we have an update.

Thanks for using Prowler 🚀