fix ckv_azure_6 for azapi

Azure · Mar 6, 2025 · 414c3db · 414c3db
1 parent b736fe4
commit 414c3db
Show file tree

Hide file tree

Showing 3 changed files with 1 addition and 89 deletions.
diff --git a/policy/checkov/AKSApiServerAuthorizedIpRanges.azapi.rego b/policy/checkov/AKSApiServerAuthorizedIpRanges.azapi.rego
@@ -13,7 +13,7 @@ valid_azapi_kubernetes_cluster_api_server_authorized_ip_ranges(resource) if {
 deny_CKV_AZURE_6 contains reason if {
     resource := data.utils.resource(input, "azapi_resource")[_]
     data.utils.is_azure_type(resource.values, "Microsoft.ContainerService/managedClusters")
-    not valid_azapi_kubernetes_cluster_api_server_authorized_ip_ranges(resource.changes.after)
+    not valid_azapi_kubernetes_cluster_api_server_authorized_ip_ranges(resource)
 
     reason := sprintf("checkov/CKV_AZURE_6: Ensure AKS has an API Server Authorized IP Ranges enabled %s: https://github.com/bridgecrewio/checkov/blob/main/checkov/terraform/checks/resource/azure/AKSApiServerAuthorizedIpRanges.py", [resource.address])
 }
diff --git a/policy/checkov/AKSApiServerAuthorizedIpRanges.py b/policy/checkov/AKSApiServerAuthorizedIpRanges.py
diff --git a/policy/checkov/AKSApiServerAuthorizedIpRanges.tf b/policy/checkov/AKSApiServerAuthorizedIpRanges.tf