codepipeline-template.yaml [161:216]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    SSMParameterForSonar:
      Type: 'AWS::SSM::Parameter'
      Condition: ScanWith_SonarQube
      Properties:
        Name: !Sub ${AWS::StackName}-Sonarqube-Token
        Type: StringList 
        Value: !Ref SonarQubeScanToken

    SSMParameterSonarQubeURL:
      Type: 'AWS::SSM::Parameter'
      Condition: ScanWith_SonarQube
      Properties:
        Name: !Sub ${AWS::StackName}-SonarQubeURL
        Type: StringList 
        Value: !Ref SonarQubeURLName

    SSMParameterForZapApiKey:
      Type: 'AWS::SSM::Parameter'
      Properties:
        Name: !Sub ${AWS::StackName}-Zap-ApiKey
        Type: StringList 
        Value: !Ref OwaspZapApiKey

    SSMParameterOwaspZapURL:
      Type: 'AWS::SSM::Parameter'
      Properties:
        Name: !Sub ${AWS::StackName}-Owasp-Zap-URL
        Type: StringList 
        Value: !Ref OwaspZapURLName

    SSMParameterAppURL:
      Type: 'AWS::SSM::Parameter'
      Properties:
        Name: !Sub ${AWS::StackName}-Application-URL
        Type: StringList 
        Value: !Ref ApplicationURLForDASTScan

    ### CloudWatch LogGroup for storing pipeline logs
    CloudWatchLogGroup:
      Type: AWS::Logs::LogGroup
      Properties: 
        LogGroupName: !Sub ${AWS::StackName}-pipeline-logs
        RetentionInDays: 7

    ### KMS key for codebuild data encryption
    PipelineKMSKey:
      Type: AWS::KMS::Key
      Properties: 
        Description: KMS key for pipeline
        Enabled: true
        EnableKeyRotation: true
        KeyPolicy: 
          Version: '2012-10-17'
          Statement:
          - Effect: Allow
            Principal:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



workshop/templates/devsecops-codepipeline.yaml [167:222]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    SSMParameterForSonar:
      Type: 'AWS::SSM::Parameter'
      Condition: ScanWith_SonarQube
      Properties:
        Name: !Sub ${AWS::StackName}-Sonarqube-Token
        Type: StringList 
        Value: !Ref SonarQubeScanToken

    SSMParameterSonarQubeURL:
      Type: 'AWS::SSM::Parameter'
      Condition: ScanWith_SonarQube
      Properties:
        Name: !Sub ${AWS::StackName}-SonarQubeURL
        Type: StringList 
        Value: !Ref SonarQubeURLName

    SSMParameterForZapApiKey:
      Type: 'AWS::SSM::Parameter'
      Properties:
        Name: !Sub ${AWS::StackName}-Zap-ApiKey
        Type: StringList 
        Value: !Ref OwaspZapApiKey

    SSMParameterOwaspZapURL:
      Type: 'AWS::SSM::Parameter'
      Properties:
        Name: !Sub ${AWS::StackName}-Owasp-Zap-URL
        Type: StringList 
        Value: !Ref OwaspZapURLName

    SSMParameterAppURL:
      Type: 'AWS::SSM::Parameter'
      Properties:
        Name: !Sub ${AWS::StackName}-Application-URL
        Type: StringList 
        Value: !Ref ApplicationURLForDASTScan

    ### CloudWatch LogGroup for storing pipeline logs
    CloudWatchLogGroup:
      Type: AWS::Logs::LogGroup
      Properties: 
        LogGroupName: !Sub ${AWS::StackName}-pipeline-logs
        RetentionInDays: 7

    ### KMS key for codebuild data encryption
    PipelineKMSKey:
      Type: AWS::KMS::Key
      Properties: 
        Description: KMS key for pipeline
        Enabled: true
        EnableKeyRotation: true
        KeyPolicy: 
          Version: '2012-10-17'
          Statement:
          - Effect: Allow
            Principal:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



