Add compliant and non-compliant examples of aws-kmskey-encryption-cdk, api-logging-disabled-cdk

src/typescript/detector/high/api_logging_disabled_cdk/api_logging_disabled_cdk.ts

@@ -0,0 +1,51 @@
+/*
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+
+
+// {fact rule=api-logging-disabled-cdk@v1.0 defects=1}
+import * as cdk from "@aws-cdk/core"
+import { CfnStage as CfnV2Stage } from "aws-cdk-lib/aws-apigatewayv2"
+import { Stack } from "aws-cdk-lib/core"
+
+
+export class CdkStarterStack extends cdk.Stack {
+
+    constructor(scope: cdk.App, id: string, props?: cdk.StackProps) {
+        super(scope, id, props)
+
+        // Noncompliant: Logging disabled
+        new CfnV2Stage(Stack, "rHttpApiDefaultStage", {
+            apiId: "foo",
+            stageName: "baz"
+        })
+
+    }
+}
+// {/fact}
+
+// {fact rule=api-logging-disabled-cdk@v1.0 defects=0}
+import * as cdk from "@aws-cdk/core"
+import { CfnStage as CfnV2Stage } from "aws-cdk-lib/aws-apigatewayv2"
+import { Stack } from "aws-cdk-lib/core"
+
+
+export class CdkStarterStack extends cdk.Stack {
+
+    constructor(scope: cdk.App, id: string, props?: cdk.StackProps) {
+        super(scope, id, props);
+
+        // Compliant: Logging present
+        new CfnV2Stage(Stack, "rStage", {
+            accessLogSettings: {
+              destinationArn: "foo",
+              format: "$context.requestId"
+            },
+            apiId: "bar",
+            stageName: "baz"
+          })
+
+    }
+}
+// {/fact}

src/typescript/detector/high/aws_kmskey_encryption_cdk/aws_kmskey_encryption_cdk.ts

@@ -0,0 +1,55 @@
+/* Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+
+
+// {fact rule=aws-kmskey-encryption-cdk@v1.0 defects=1}
+import { BuildSpec, Project } from "aws-cdk-lib/aws-codebuild";
+import * as cdk from "@aws-cdk/core";
+import { Stack } from "aws-cdk-lib/core";
+
+
+export class CdkStarterStack extends cdk.Stack {
+    constructor(scope: cdk.App, id: string, props?: cdk.StackProps) {
+        super(scope, id, props);
+
+            //Noncompliant: KMS key encryption configuration is not present
+            new Project(Stack, "rBuildProject", {
+                                buildSpec: BuildSpec.fromObjectToYaml(
+                                    {
+                                      version: 0.2,
+                                      phases: {
+                                        build: { commands: ['echo "foo"'], } }
+                                    }
+                                )
+            });
+    }
+}
+// {/fact}
+
+// {fact rule=aws-kmskey-encryption-cdk@v1.0 defects=0}
+import { BuildSpec, Project } from "aws-cdk-lib/aws-codebuild";
+import * as cdk from "@aws-cdk/core";
+import { Stack } from "aws-cdk-lib/core";
+import { Key } from "aws-cdk-lib/aws-kms";
+
+
+export class CdkStarterStack extends cdk.Stack {
+    constructor(scope: cdk.App, id: string, props?: cdk.StackProps) {
+        super(scope, id, props);
+
+            //Compliant: KMS key encryption configuration is present
+            new Project(Stack, "rBuildProject", {
+                                buildSpec: BuildSpec.fromObjectToYaml(
+                                    {
+                                      version: 0.2,
+                                      phases: {
+                                          build: { commands: ['echo "foo"'] }
+                                      }
+                                    }),
+                                encryptionKey: new Key(Stack, "rBuildKey")
+
+            });
+    }
+}
+// {/fact}