fix: checkov skip enforcing guardrails

alexa-perlov · alexa-perlov · commit 237722920fe8 · 2025-02-03T13:25:37.000-05:00
diff --git a/main.tf b/main.tf
@@ -115,7 +115,6 @@ resource "aws_bedrockagent_agent_collaborator" "agent_collaborator" {
   }
 }
 
-#checkov:skip=CKV_AWS_383:The user can optionally associate agent with Bedrock guardrails
 resource "aws_bedrockagent_agent" "agent_supervisor" {
   count                      = local.counter_collaborator
   agent_name                  = "${random_string.solution_prefix.result}-${var.supervisor_name}"
@@ -125,6 +124,7 @@ resource "aws_bedrockagent_agent" "agent_supervisor" {
   foundation_model            = var.supervisor_model
   instruction                 = var.supervisor_instruction
   customer_encryption_key_arn = var.supervisor_kms_key_arn
+  #checkov:skip=CKV_AWS_383:The user can optionally associate agent with Bedrock guardrails
   guardrail_configuration = local.supervisor_guardrail
   prepare_agent               = false
 }

Original file line number	Diff line number	Diff line change
`@@ -115,7 +115,6 @@ resource "aws_bedrockagent_agent_collaborator" "agent_collaborator" {`
`115`	`115`	`}`
`116`	`116`	`}`
`117`	`117`
`118`		`-#checkov:skip=CKV_AWS_383:The user can optionally associate agent with Bedrock guardrails`
`119`	`118`	`resource "aws_bedrockagent_agent" "agent_supervisor" {`
`120`	`119`	`count = local.counter_collaborator`
`121`	`120`	`agent_name = "${random_string.solution_prefix.result}-${var.supervisor_name}"`
`@@ -125,6 +124,7 @@ resource "aws_bedrockagent_agent" "agent_supervisor" {`
`125`	`124`	`foundation_model = var.supervisor_model`
`126`	`125`	`instruction = var.supervisor_instruction`
`127`	`126`	`customer_encryption_key_arn = var.supervisor_kms_key_arn`
	`127`	`+ #checkov:skip=CKV_AWS_383:The user can optionally associate agent with Bedrock guardrails`
`128`	`128`	`guardrail_configuration = local.supervisor_guardrail`
`129`	`129`	`prepare_agent = false`
`130`	`130`	`}`