diff --git a/assets/queries/cloudFormation/aws/ecs_cluster_container_insights_disabled/query.rego b/assets/queries/cloudFormation/aws/ecs_cluster_container_insights_disabled/query.rego index d97a902eef9..405e5434e1a 100644 --- a/assets/queries/cloudFormation/aws/ecs_cluster_container_insights_disabled/query.rego +++ b/assets/queries/cloudFormation/aws/ecs_cluster_container_insights_disabled/query.rego @@ -47,3 +47,8 @@ container_insights(settings){ settings[0].Name == "containerInsights" settings[0].Value == "enabled" } + +container_insights(settings){ + settings[0].Name == "containerInsights" + settings[0].Value == "enhanced" +} diff --git a/assets/queries/cloudFormation/aws/ecs_cluster_container_insights_disabled/test/negative3.yaml b/assets/queries/cloudFormation/aws/ecs_cluster_container_insights_disabled/test/negative3.yaml new file mode 100644 index 00000000000..633c7757b69 --- /dev/null +++ b/assets/queries/cloudFormation/aws/ecs_cluster_container_insights_disabled/test/negative3.yaml @@ -0,0 +1,11 @@ +Resources: + ECSCluster: + Type: 'AWS::ECS::Cluster' + Properties: + ClusterName: MyCluster + ClusterSettings: + - Name: containerInsights + Value: enhanced + Tags: + - Key: environment + Value: production \ No newline at end of file