CIRRUS-core/.tflint.hcl at main · asfadmin/CIRRUS-core · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
plugin "terraform" {
  enabled = true
  preset  = "recommended"
}

plugin "aws" {
  enabled = true
  version = "0.35.0"
  source  = "github.com/terraform-linters/tflint-ruleset-aws"
}

## disabled rules
rule "terraform_documented_outputs" {
  enabled = false
}
rule "terraform_documented_variables" {
  enabled = false
}
rule "terraform_naming_convention" {
  # forces snake case for many things, including deployed lambda names, don't
  # want that
  enabled = false
}
rule "terraform_unused_declarations" {
  # this needs to be disabled so that DAACs using CIRRUS have the option to use
  # any given variable defined here
  enabled = false
}


## default ruleset
rule "terraform_deprecated_interpolation" {
  enabled = true
}
rule "terraform_deprecated_index" {
  enabled = true
}
rule "terraform_comment_syntax" {
  enabled = true
}
rule "terraform_typed_variables" {
  enabled = true
}
rule "terraform_module_pinned_source" {
  enabled = true
}
rule "terraform_required_version" {
  enabled = true
}
rule "terraform_required_providers" {
  enabled = true
}
rule "terraform_standard_module_structure" {
  enabled = true
}
rule "terraform_workspace_remote" {
  enabled = true
}


rule "aws_secretsmanager_secret_version_invalid_secret_string" {
  # Disabled: TFLint crashes evaluating dynamic/null values in secret_string
  enabled = false
}
rule "aws_db_instance_invalid_type" {
  enabled = true
}
rule "aws_elasticache_cluster_invalid_type" {
  enabled = true
}
rule "aws_route_not_specified_target" {
  enabled = true
}
rule "aws_route_specified_multiple_targets" {
  enabled = true
}
rule "aws_instance_previous_type" {
  enabled = true
}
rule "aws_db_instance_previous_type" {
  enabled = true
}
rule "aws_db_instance_default_parameter_group" {
  enabled = true
}
rule "aws_elasticache_cluster_previous_type" {
  enabled = true
}
rule "aws_elasticache_cluster_default_parameter_group" {
  enabled = true
}