False alert "IAM Group Without Users" with Terraform aws_iam_user_group_membership? #7250

Unanswered

elchenberg asked this question in Q&A

elchenberg
Sep 9, 2024

I have a user and a group:

resource "aws_iam_user" "my_user" {
  name = "user-name"
}
resource "aws_iam_group" "my_group" {
  name = "group-name"
}

I also have a user group membership:

resource "aws_iam_user_group_membership" "my_memberships" {
  user = aws_iam_user.my_user.name

  groups = [
    aws_iam_group.my_group.name,
  ]
}

So my group has a user but KICS (v2.1.2) complains:

IAM Group Without Users, Severity: MEDIUM, Results: 1
Description: IAM Group should have at least one user associated
Platform: Terraform
Learn more about this vulnerability: https://docs.kics.io/latest/queries/terraform-queries/aws/fc101ca7-c9dd-4198-a1eb-0fbe92e80044

Is this a bug in KICS or is there a reason why I should use aws_iam_group_membership instead of aws_iam_user_group_membership?

Replies: 0 comments

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment