INNER CODE UNIT · Ruby

filter_violations_by_deny_list_and_profile

stelligent/cfn_nag · lib/cfn-nag/cfn_nag.rb:132

  def filter_violations_by_deny_list_and_profile(violations)
    violations = filter_violations_by_profile(
      profile_definition: @config.profile_definition,
      rule_definitions: @config.custom_rule_loader.rule_definitions,
      violations: violations
    )

    # this must come after - deny list should always win
    filter_violations_by_deny_list(
      deny_list_definition: @config.deny_list_definition,
      rule_definitions: @config.custom_rule_loader.rule_definitions,
      violations: violations
    )
  rescue StandardError => deny_list_or_profile_parse_error
    violations << Violation.fatal_violation(deny_list_or_profile_parse_error.to_s)
    violations
  end

View source record →