Fixing the bug for google_kms_crypto_key policies (#848)

* Fixing the bug for google_kms_crypto_key policies: - checkRotation90Days - checkRotation365Days * Indentation changes
tenable · Jun 9, 2021 · 0eae483 · 0eae483
1 parent cbbde51
commit 0eae483
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 8 deletions.
diff --git a/pkg/policies/opa/rego/gcp/google_kms_crypto_key/checkRotation365Days.rego b/pkg/policies/opa/rego/gcp/google_kms_crypto_key/checkRotation365Days.rego
@@ -1,6 +1,6 @@
 package accurics
 
-checkRotation365Days[kms.id] {
-  kms := input.google_kms_crypto_key[_]
-  kms.config.rotation_period <= "31536000s"
-}
+checkRotation365Days[crypto_key.id]{
+    crypto_key := input.google_kms_crypto_key[_]
+    to_number(trim(crypto_key.config.rotation_period, "s")) > 31536000
+}
diff --git a/pkg/policies/opa/rego/gcp/google_kms_crypto_key/checkRotation90Days.rego b/pkg/policies/opa/rego/gcp/google_kms_crypto_key/checkRotation90Days.rego
@@ -1,7 +1,6 @@
 package accurics
 
-checkRotation90Days[api.id]
-{
-    api := input.google_kms_crypto_key[_]
-    api.config.rotation_period <= "7776000s"
+checkRotation90Days[crypto_key.id]{
+    crypto_key := input.google_kms_crypto_key[_]
+    to_number(trim(crypto_key.config.rotation_period, "s")) > 7776000
 }