Create aaa.tf

[PavelLinearB]

No description provided.

[orca-security-us]

Orca Security Scan Summary

Status	Check	Issues by priority
Passed	Infrastructure as Code	0   0   3   3	View in Orca
Passed	Secrets	0   0   0   0	View in Orca
Passed	Vulnerabilities	0   0   0   0	View in Orca

🛡️ The following IaC misconfigurations have been detected

	NAME	FILE
	S3 Bucket Object Versioning not Enabled	aaa.tf	View in code
	AWS S3 Bucket Without "MFA Delete" Enabled	aaa.tf	View in code
	AWS S3 Bucket Without "MFA Delete" Enabled	aaa.tf	View in code
	Customer Master Key Rotation is Disabled	aaa.tf	View in code
	IAM Access Analyzer Is Not Enabled	aaa.tf	View in code
	S3 Bucket Server Access Logging is Disabled	aaa.tf	View in code

[jit-ci]

❌ Jit has detected 1 important finding in this PR that you should review.
The finding is detailed below as a comment.
It’s highly recommended that you fix this security issue before merge.

[jit-ci]

Security control: Iac Misconfig Detection Terraform

Type: Customer Master Keys (Cmk) Must Have Rotation Enabled, Which Means The Attribute 'Enable Key Rotation' Must Be Set To 'True' When The Key Is Enabled.

Description: Customer Master Keys (CMK) must have rotation enabled, which means the attribute 'enable_key_rotation' must be set to 'true' when the key is enabled.

Severity: HIGH

Learn more about this issue

---

---

Jit Bot commands and options (e.g., ignore issue)

You can trigger Jit actions by commenting on this PR review:

• #jit_ignore_fp Ignore and mark this specific single instance of finding as “False Positive”
• #jit_ignore_accept Ignore and mark this specific single instance of finding as “Accept Risk”
• #jit_undo_ignore Undo ignore command

[gitstream-cm]

This PR failed due to A severity vulnerability finding, if you don't fix it, please select:

• I need help with that fix. Assign to security champion
• I want to accept the risk, please approve. Assign the PR to the security team
• This is a false positive, please approve. Assign the PR to the security team
• This is a test/simulator environment, please exclude. Assign to Team lead

[sonarcloud]

Quality Gate failed

Failed conditions
4 Security Hotspots

See analysis details on SonarCloud

[gitstream-cm]

comments: {"infrastructure_as_code":{"count":6,"priority":{"high":0,"medium":0,"low":3,"info":3}},"vulnerabilities":{"count":0,"priority":{"high":0,"medium":0,"low":0,"info":0}},"secrets":{"count":0,"priority":{"high":0,"medium":0,"low":0,"info":0}}}

[PavelLinearB]

.