in src/rules/redshift/RedshiftRequireTlsSSL.ts [52:77]
function isMatchingParameterGroup(
node: CfnClusterParameterGroup,
parameterGroupName: string
): boolean {
const parameterGroupLogicalId = NagRules.resolveResourceFromInstrinsic(
node,
node.ref
);
if (
parameterGroupName !== parameterGroupLogicalId ||
node.parameters == undefined
) {
return false;
}
const parameters = Stack.of(node).resolve(node.parameters);
for (const parameter of parameters) {
const resolvedParameter = Stack.of(node).resolve(parameter);
if (
resolvedParameter.parameterName.toLowerCase() == 'require_ssl' &&
resolvedParameter.parameterValue.toLowerCase() == 'true'
) {
return true;
}
}
return false;
}