Repository: bridgecrewio/checkov

Issue:
Add new check: API Gateway should have X-Ray Tracing enabled 
https://www.terraform.io/docs/providers/aws/r/api_gateway_stage.html#xray_tracing_enabled

TracingEnabled: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-stage.html

Discussion:

Patch:
diff --git a/HomebrewFormula/checkov.rb b/HomebrewFormula/checkov.rb
index dda0c40d2..153197a1d 100644
--- a/HomebrewFormula/checkov.rb
+++ b/HomebrewFormula/checkov.rb
@@ -3,8 +3,8 @@ class Checkov < Formula
 
   desc "Shiny new formula"
   homepage "https://github.com/bridgecrewio/checkov"
-  url "https://files.pythonhosted.org/packages/d6/62/7f72d2ded7c145819ebea7b909ca175a86be9e54c6a27766a6f5eaba496a/checkov-1.0.505.tar.gz"
-  sha256 "f7fe1e7bda4a2e32e41a3d808ad0b9d90b6f3a988167f1d861866cad6bd8ceec"
+  url "https://files.pythonhosted.org/packages/85/6f/07c56bfbb1e47c5b99730b49c8a69f495cfdd64393efd3d2e7b8b8107ac0/checkov-1.0.506.tar.gz"
+  sha256 "df824034e66ab655368a613d4fffb2ced0c5260e5d48be33273a1f1cf0a0e402"
 
   depends_on "python3"
 
diff --git a/checkov/terraform/checks/resource/aws/APIGatewayXray.py b/checkov/terraform/checks/resource/aws/APIGatewayXray.py
new file mode 100644
index 000000000..561784e97
--- /dev/null
+++ b/checkov/terraform/checks/resource/aws/APIGatewayXray.py
@@ -0,0 +1,18 @@
+from checkov.terraform.checks.resource.base_resource_value_check import BaseResourceValueCheck
+from checkov.common.models.enums import CheckCategories
+
+
+class APIGatewayXray(BaseResourceValueCheck):
+
+    def __init__(self):
+        name = "Ensure API Gateway has X-Ray Tracing enabled"
+        id = "CKV_AWS_73"
+        supported_resources = ['aws_api_gateway_stage']
+        categories = [CheckCategories.LOGGING]
+        super().__init__(name=name, id=id, categories=categories, supported_resources=supported_resources)
+
+    def get_inspected_key(self):
+        return "xray_tracing_enabled"
+
+
+check = APIGatewayXray()
diff --git a/checkov/terraform/checks/resource/aws/DocDBEncryption.py b/checkov/terraform/checks/resource/aws/DocDBEncryption.py
new file mode 100644
index 000000000..60fe55e5a
--- /dev/null
+++ b/checkov/terraform/checks/resource/aws/DocDBEncryption.py
@@ -0,0 +1,17 @@
+from checkov.common.models.enums import CheckCategories
+from checkov.terraform.checks.resource.base_resource_value_check import BaseResourceValueCheck
+
+
+class DocDBEncryption(BaseResourceValueCheck):
+    def __init__(self):
+        name = "Ensure DocDB is encrypted at rest (default is unencrypted)"
+        id = "CKV_AWS_74"
+        supported_resources = ['aws_docdb_cluster', 'aws_docdb_cluster_instance']
+        categories = [CheckCategories.ENCRYPTION]
+        super().__init__(name=name, id=id, categories=categories, supported_resources=supported_resources)
+
+    def get_inspected_key(self):
+        return "storage_encrypted"
+
+
+check = DocDBEncryption()
diff --git a/checkov/version.py b/checkov/version.py
index 539875d9d..376fc6213 100644
--- a/checkov/version.py
+++ b/checkov/version.py
@@ -1,1 +1,1 @@
-version = '1.0.505'
+version = '1.0.506'
diff --git a/docs/3.Scans/resource-scans.md b/docs/3.Scans/resource-scans.md
index 47d0133b4..e4c5ee9d3 100644
--- a/docs/3.Scans/resource-scans.md
+++ b/docs/3.Scans/resource-scans.md
@@ -143,314 +143,316 @@ nav_order: 1
 | 132 | CKV_AWS_70   | resource          | aws_s3_bucket_policy                                                         | Ensure S3 bucket does not allow an action with any Principal                                                                                                                                             | Terraform      |
 | 133 | CKV_AWS_71   | resource          | aws_redshift_cluster                                                         | Ensure Redshift Cluster logging is enabled                                                                                                                                                               | Terraform      |
 | 134 | CKV_AWS_72   | resource          | aws_sqs_queue_policy                                                         | Ensure SQS policy does not allow ALL (*) actions.                                                                                                                                                        | Terraform      |
-| 135 | CKV_AZURE_1  | resource          | azurerm_virtual_machine                                                      | Ensure Azure Instance does not use basic authentication(Use SSH Key Instead)                                                                                                                             | Terraform      |
-| 136 | CKV_AZURE_1  | resource          | azurerm_linux_virtual_machine                                                | Ensure Azure Instance does not use basic authentication(Use SSH Key Instead)                                                                                                                             | Terraform      |
-| 137 | CKV_AZURE_1  | resource          | Microsoft.Compute/virtualMachines                                            | Ensure Azure Instance does not use basic authentication(Use SSH Key Instead)                                                                                                                             | arm            |
-| 138 | CKV_AZURE_2  | resource          | azurerm_managed_disk                                                         | Ensure Azure managed disk have encryption enabled                                                                                                                                                        | Terraform      |
-| 139 | CKV_AZURE_2  | resource          | Microsoft.Compute/disks                                                      | Ensure Azure managed disk have encryption enabled                                                                                                                                                        | arm            |
-| 140 | CKV_AZURE_3  | resource          | azurerm_storage_account                                                      | Ensure that 'Secure transfer required' is set to 'Enabled'                                                                                                                                               | Terraform      |
-| 141 | CKV_AZURE_3  | resource          | Microsoft.Storage/storageAccounts                                            | Ensure that 'supportsHttpsTrafficOnly' is set to 'true'                                                                                                                                                  | arm            |
-| 142 | CKV_AZURE_4  | resource          | azurerm_kubernetes_cluster                                                   | Ensure AKS logging to Azure Monitoring is Configured                                                                                                                                                     | Terraform      |
-| 143 | CKV_AZURE_4  | resource          | Microsoft.ContainerService/managedClusters                                   | Ensure AKS logging to Azure Monitoring is Configured                                                                                                                                                     | arm            |
-| 144 | CKV_AZURE_5  | resource          | azurerm_kubernetes_cluster                                                   | Ensure RBAC is enabled on AKS clusters                                                                                                                                                                   | Terraform      |
-| 145 | CKV_AZURE_5  | resource          | Microsoft.ContainerService/managedClusters                                   | Ensure RBAC is enabled on AKS clusters                                                                                                                                                                   | arm            |
-| 146 | CKV_AZURE_6  | resource          | azurerm_kubernetes_cluster                                                   | Ensure AKS has an API Server Authorized IP Ranges enabled                                                                                                                                                | Terraform      |
-| 147 | CKV_AZURE_6  | resource          | Microsoft.ContainerService/managedClusters                                   | Ensure AKS has an API Server Authorized IP Ranges enabled                                                                                                                                                | arm            |
-| 148 | CKV_AZURE_7  | resource          | azurerm_kubernetes_cluster                                                   | Ensure AKS cluster has Network Policy configured                                                                                                                                                         | Terraform      |
-| 149 | CKV_AZURE_7  | resource          | Microsoft.ContainerService/managedClusters                                   | Ensure AKS cluster has Network Policy configured                                                                                                                                                         | arm            |
-| 150 | CKV_AZURE_8  | resource          | azurerm_kubernetes_cluster                                                   | Ensure Kube Dashboard is disabled                                                                                                                                                                        | Terraform      |
-| 151 | CKV_AZURE_8  | resource          | Microsoft.ContainerService/managedClusters                                   | Ensure Kubernetes Dashboard is disabled                                                                                                                                                                  | arm            |
-| 152 | CKV_AZURE_9  | resource          | azure_security_group_rule                                                    | Ensure that RDP access is restricted from the internet                                                                                                                                                   | Terraform      |
-| 153 | CKV_AZURE_9  | resource          | azurerm_network_security_rule                                                | Ensure that RDP access is restricted from the internet                                                                                                                                                   | Terraform      |
-| 154 | CKV_AZURE_9  | resource          | azurerm_network_security_group                                               | Ensure that RDP access is restricted from the internet                                                                                                                                                   | Terraform      |
-| 155 | CKV_AZURE_9  | resource          | Microsoft.Network/networkSecurityGroups                                      | Ensure that RDP access is restricted from the internet                                                                                                                                                   | arm            |
-| 156 | CKV_AZURE_9  | resource          | Microsoft.Network/networkSecurityGroups/securityRules                        | Ensure that RDP access is restricted from the internet                                                                                                                                                   | arm            |
-| 157 | CKV_AZURE_10 | resource          | azure_security_group_rule                                                    | Ensure that SSH access is restricted from the internet                                                                                                                                                   | Terraform      |
-| 158 | CKV_AZURE_10 | resource          | azurerm_network_security_rule                                                | Ensure that SSH access is restricted from the internet                                                                                                                                                   | Terraform      |
-| 159 | CKV_AZURE_10 | resource          | azurerm_network_security_group                                               | Ensure that SSH access is restricted from the internet                                                                                                                                                   | Terraform      |
-| 160 | CKV_AZURE_10 | resource          | Microsoft.Network/networkSecurityGroups                                      | Ensure that SSH access is restricted from the internet                                                                                                                                                   | arm            |
-| 161 | CKV_AZURE_10 | resource          | Microsoft.Network/networkSecurityGroups/securityRules                        | Ensure that SSH access is restricted from the internet                                                                                                                                                   | arm            |
-| 162 | CKV_AZURE_11 | resource          | azurerm_mariadb_firewall_rule                                                | Ensure no SQL Databases allow ingress from 0.0.0.0/0 (ANY IP)                                                                                                                                            | Terraform      |
-| 163 | CKV_AZURE_11 | resource          | azurerm_sql_firewall_rule                                                    | Ensure no SQL Databases allow ingress from 0.0.0.0/0 (ANY IP)                                                                                                                                            | Terraform      |
-| 164 | CKV_AZURE_11 | resource          | azurerm_postgresql_firewall_rule                                             | Ensure no SQL Databases allow ingress from 0.0.0.0/0 (ANY IP)                                                                                                                                            | Terraform      |
-| 165 | CKV_AZURE_11 | resource          | azurerm_mysql_firewall_rule                                                  | Ensure no SQL Databases allow ingress from 0.0.0.0/0 (ANY IP)                                                                                                                                            | Terraform      |
-| 166 | CKV_AZURE_11 | resource          | Microsoft.Sql/servers                                                        | Ensure no SQL Databases allow ingress from 0.0.0.0/0 (ANY IP)                                                                                                                                            | arm            |
-| 167 | CKV_AZURE_12 | resource          | azurerm_network_watcher_flow_log                                             | Ensure that Network Security Group Flow Log retention period is 'greater than 90 days'                                                                                                                   | Terraform      |
-| 168 | CKV_AZURE_12 | resource          | Microsoft.Network/networkWatchers/flowLogs                                   | Ensure that Network Security Group Flow Log retention period is 'greater than 90 days'                                                                                                                   | arm            |
-| 169 | CKV_AZURE_12 | resource          | Microsoft.Network/networkWatchers/FlowLogs                                   | Ensure that Network Security Group Flow Log retention period is 'greater than 90 days'                                                                                                                   | arm            |
-| 170 | CKV_AZURE_12 | resource          | Microsoft.Network/networkWatchers/flowLogs/                                  | Ensure that Network Security Group Flow Log retention period is 'greater than 90 days'                                                                                                                   | arm            |
-| 171 | CKV_AZURE_12 | resource          | Microsoft.Network/networkWatchers/FlowLogs/                                  | Ensure that Network Security Group Flow Log retention period is 'greater than 90 days'                                                                                                                   | arm            |
-| 172 | CKV_AZURE_13 | resource          | azurerm_app_service                                                          | Ensure App Service Authentication is set on Azure App Service                                                                                                                                            | Terraform      |
-| 173 | CKV_AZURE_13 | resource          | Microsoft.Web/sites/config                                                   | Ensure App Service Authentication is set on Azure App Service                                                                                                                                            | arm            |
-| 174 | CKV_AZURE_13 | resource          | config                                                                       | Ensure App Service Authentication is set on Azure App Service                                                                                                                                            | arm            |
-| 175 | CKV_AZURE_14 | resource          | azurerm_app_service                                                          | Ensure web app redirects all HTTP traffic to HTTPS in Azure App Service                                                                                                                                  | Terraform      |
-| 176 | CKV_AZURE_14 | resource          | Microsoft.Web/sites                                                          | Ensure web app redirects all HTTP traffic to HTTPS in Azure App Service                                                                                                                                  | arm            |
-| 177 | CKV_AZURE_15 | resource          | azurerm_app_service                                                          | Ensure web app is using the latest version of TLS encryption                                                                                                                                             | Terraform      |
-| 178 | CKV_AZURE_15 | resource          | Microsoft.Web/sites                                                          | Ensure web app is using the latest version of TLS encryption                                                                                                                                             | arm            |
-| 179 | CKV_AZURE_16 | resource          | azurerm_app_service                                                          | Ensure that Register with Azure Active Directory is enabled on App Service                                                                                                                               | Terraform      |
-| 180 | CKV_AZURE_16 | resource          | Microsoft.Web/sites                                                          | Ensure that Register with Azure Active Directory is enabled on App Service                                                                                                                               | arm            |
-| 181 | CKV_AZURE_17 | resource          | azurerm_app_service                                                          | Ensure the web app has 'Client Certificates (Incoming client certificates)' set                                                                                                                          | Terraform      |
-| 182 | CKV_AZURE_17 | resource          | Microsoft.Web/sites                                                          | Ensure the web app has 'Client Certificates (Incoming client certificates)' set                                                                                                                          | arm            |
-| 183 | CKV_AZURE_18 | resource          | azurerm_app_service                                                          | Ensure that 'HTTP Version' is the latest if used to run the web app                                                                                                                                      | Terraform      |
-| 184 | CKV_AZURE_18 | resource          | Microsoft.Web/sites                                                          | Ensure that 'HTTP Version' is the latest if used to run the web app                                                                                                                                      | arm            |
-| 185 | CKV_AZURE_19 | resource          | azurerm_security_center_subscription_pricing                                 | Ensure that standard pricing tier is selected                                                                                                                                                            | Terraform      |
-| 186 | CKV_AZURE_19 | resource          | Microsoft.Security/pricings                                                  | Ensure that standard pricing tier is selected                                                                                                                                                            | arm            |
-| 187 | CKV_AZURE_20 | resource          | azurerm_security_center_contact                                              | Ensure that security contact 'Phone number' is set                                                                                                                                                       | Terraform      |
-| 188 | CKV_AZURE_20 | resource          | Microsoft.Security/securityContacts                                          | Ensure that security contact 'Phone number' is set                                                                                                                                                       | arm            |
-| 189 | CKV_AZURE_21 | resource          | azurerm_security_center_contact                                              | Ensure that 'Send email notification for high severity alerts' is set to 'On'                                                                                                                            | Terraform      |
-| 190 | CKV_AZURE_21 | resource          | Microsoft.Security/securityContacts                                          | Ensure that 'Send email notification for high severity alerts' is set to 'On'                                                                                                                            | arm            |
-| 191 | CKV_AZURE_22 | resource          | azurerm_security_center_contact                                              | Ensure that 'Send email notification for high severity alerts' is set to 'On'                                                                                                                            | Terraform      |
-| 192 | CKV_AZURE_22 | resource          | Microsoft.Security/securityContacts                                          | Ensure that 'Send email notification for high severity alerts' is set to 'On'                                                                                                                            | arm            |
-| 193 | CKV_AZURE_23 | resource          | azurerm_sql_server                                                           | Ensure that 'Auditing' is set to 'On' for SQL servers                                                                                                                                                    | Terraform      |
-| 194 | CKV_AZURE_23 | resource          | azurerm_mssql_server                                                         | Ensure that 'Auditing' is set to 'On' for SQL servers                                                                                                                                                    | Terraform      |
-| 195 | CKV_AZURE_23 | resource          | Microsoft.Sql/servers                                                        | Ensure that 'Auditing' is set to 'Enabled' for SQL servers                                                                                                                                               | arm            |
-| 196 | CKV_AZURE_24 | resource          | azurerm_sql_server                                                           | Ensure that 'Auditing' Retention is 'greater than 90 days' for SQL servers                                                                                                                               | Terraform      |
-| 197 | CKV_AZURE_24 | resource          | azurerm_mssql_server                                                         | Ensure that 'Auditing' Retention is 'greater than 90 days' for SQL servers                                                                                                                               | Terraform      |
-| 198 | CKV_AZURE_24 | resource          | Microsoft.Sql/servers                                                        | Ensure that 'Auditing' Retention is 'greater than 90 days' for SQL servers                                                                                                                               | arm            |
-| 199 | CKV_AZURE_25 | resource          | azurerm_mssql_server_security_alert_policy                                   | Ensure that 'Threat Detection types' is set to 'All'                                                                                                                                                     | Terraform      |
-| 200 | CKV_AZURE_25 | resource          | Microsoft.Sql/servers/databases                                              | Ensure that 'Threat Detection types' is set to 'All'                                                                                                                                                     | arm            |
-| 201 | CKV_AZURE_26 | resource          | azurerm_mssql_server_security_alert_policy                                   | Ensure that 'Send Alerts To' is enabled for MSSQL servers                                                                                                                                                | Terraform      |
-| 202 | CKV_AZURE_26 | resource          | Microsoft.Sql/servers/databases                                              | Ensure that 'Send Alerts To' is enabled for MSSQL servers                                                                                                                                                | arm            |
-| 203 | CKV_AZURE_27 | resource          | azurerm_mssql_server_security_alert_policy                                   | Ensure that 'Email service and co-administrators' is 'Enabled' for MSSQL servers                                                                                                                         | Terraform      |
-| 204 | CKV_AZURE_27 | resource          | Microsoft.Sql/servers/databases                                              | Ensure that 'Email service and co-administrators' is 'Enabled' for MSSQL servers                                                                                                                         | arm            |
-| 205 | CKV_AZURE_28 | resource          | azurerm_mysql_server                                                         | Ensure 'Enforce SSL connection' is set to 'ENABLED' for MySQL Database Server                                                                                                                            | Terraform      |
-| 206 | CKV_AZURE_28 | resource          | Microsoft.DBforMySQL/servers                                                 | Ensure 'Enforce SSL connection' is set to 'ENABLED' for MySQL Database Server                                                                                                                            | arm            |
-| 207 | CKV_AZURE_29 | resource          | azurerm_postgresql_server                                                    | Ensure 'Enforce SSL connection' is set to 'ENABLED' for PostgreSQL Database Server                                                                                                                       | Terraform      |
-| 208 | CKV_AZURE_29 | resource          | Microsoft.DBforPostgreSQL/servers                                            | Ensure 'Enforce SSL connection' is set to 'ENABLED' for PostgreSQL Database Server                                                                                                                       | arm            |
-| 209 | CKV_AZURE_30 | resource          | azurerm_postgresql_configuration                                             | Ensure server parameter 'log_checkpoints' is set to 'ON' for PostgreSQL Database Server                                                                                                                  | Terraform      |
-| 210 | CKV_AZURE_30 | resource          | Microsoft.DBforPostgreSQL/servers/configurations                             | Ensure server parameter 'log_checkpoints' is set to 'ON' for PostgreSQL Database Server                                                                                                                  | arm            |
-| 211 | CKV_AZURE_30 | resource          | configurations                                                               | Ensure server parameter 'log_checkpoints' is set to 'ON' for PostgreSQL Database Server                                                                                                                  | arm            |
-| 212 | CKV_AZURE_31 | resource          | azurerm_postgresql_configuration                                             | Ensure server parameter 'log_connections' is set to 'ON' for PostgreSQL Database Server                                                                                                                  | Terraform      |
-| 213 | CKV_AZURE_31 | resource          | Microsoft.DBforPostgreSQL/servers/configurations                             | Ensure configuration 'log_connections' is set to 'ON' for PostgreSQL Database Server                                                                                                                     | arm            |
-| 214 | CKV_AZURE_31 | resource          | configurations                                                               | Ensure configuration 'log_connections' is set to 'ON' for PostgreSQL Database Server                                                                                                                     | arm            |
-| 215 | CKV_AZURE_32 | resource          | azurerm_postgresql_configuration                                             | Ensure server parameter 'connection_throttling' is set to 'ON' for PostgreSQL Database Server                                                                                                            | Terraform      |
-| 216 | CKV_AZURE_32 | resource          | Microsoft.DBforPostgreSQL/servers/configurations                             | Ensure server parameter 'connection_throttling' is set to 'ON' for PostgreSQL Database Server                                                                                                            | arm            |
-| 217 | CKV_AZURE_32 | resource          | configurations                                                               | Ensure server parameter 'connection_throttling' is set to 'ON' for PostgreSQL Database Server                                                                                                            | arm            |
-| 218 | CKV_AZURE_33 | resource          | azurerm_storage_account                                                      | Ensure Storage logging is enabled for Queue service for read, write and delete requests                                                                                                                  | Terraform      |
-| 219 | CKV_AZURE_33 | resource          | Microsoft.Storage/storageAccounts/queueServices/providers/diagnosticsettings | Ensure Storage logging is enabled for Queue service for read, write and delete requests                                                                                                                  | arm            |
-| 220 | CKV_AZURE_34 | resource          | azurerm_storage_container                                                    | Ensure that 'Public access level' is set to Private for blob containers                                                                                                                                  | Terraform      |
-| 221 | CKV_AZURE_34 | resource          | Microsoft.Storage/storageAccounts/blobServices/containers                    | Ensure that 'Public access level' is set to Private for blob containers                                                                                                                                  | arm            |
-| 222 | CKV_AZURE_34 | resource          | containers                                                                   | Ensure that 'Public access level' is set to Private for blob containers                                                                                                                                  | arm            |
-| 223 | CKV_AZURE_34 | resource          | blobServices/containers                                                      | Ensure that 'Public access level' is set to Private for blob containers                                                                                                                                  | arm            |
-| 224 | CKV_AZURE_35 | resource          | azurerm_storage_account                                                      | Ensure default network access rule for Storage Accounts is set to deny                                                                                                                                   | Terraform      |
-| 225 | CKV_AZURE_35 | resource          | azurerm_storage_account_network_rules                                        | Ensure default network access rule for Storage Accounts is set to deny                                                                                                                                   | Terraform      |
-| 226 | CKV_AZURE_35 | resource          | Microsoft.Storage/storageAccounts                                            | Ensure default network access rule for Storage Accounts is set to deny                                                                                                                                   | arm            |
-| 227 | CKV_AZURE_36 | resource          | azurerm_storage_account                                                      | Ensure 'Trusted Microsoft Services' is enabled for Storage Account access                                                                                                                                | Terraform      |
-| 228 | CKV_AZURE_36 | resource          | azurerm_storage_account_network_rules                                        | Ensure 'Trusted Microsoft Services' is enabled for Storage Account access                                                                                                                                | Terraform      |
-| 229 | CKV_AZURE_36 | resource          | Microsoft.Storage/storageAccounts                                            | Ensure 'Trusted Microsoft Services' is enabled for Storage Account access                                                                                                                                | arm            |
-| 230 | CKV_AZURE_37 | resource          | azurerm_monitor_log_profile                                                  | Ensure that Activity Log Retention is set 365 days or greater                                                                                                                                            | Terraform      |
-| 231 | CKV_AZURE_37 | resource          | microsoft.insights/logprofiles                                               | Ensure that Activity Log Retention is set 365 days or greater                                                                                                                                            | arm            |
-| 232 | CKV_AZURE_38 | resource          | azurerm_monitor_log_profile                                                  | Ensure audit profile captures all the activities                                                                                                                                                         | Terraform      |
-| 233 | CKV_AZURE_38 | resource          | microsoft.insights/logprofiles                                               | Ensure audit profile captures all the activities                                                                                                                                                         | arm            |
-| 234 | CKV_AZURE_39 | resource          | azurerm_role_definition                                                      | Ensure that no custom subscription owner roles are created                                                                                                                                               | Terraform      |
-| 235 | CKV_AZURE_39 | resource          | Microsoft.Authorization/roleDefinitions                                      | Ensure that no custom subscription owner roles are created                                                                                                                                               | arm            |
-| 236 | CKV_AZURE_40 | resource          | azurerm_key_vault_key                                                        | Ensure that the expiration date is set on all keys                                                                                                                                                       | Terraform      |
-| 237 | CKV_AZURE_41 | resource          | azurerm_key_vault_secret                                                     | Ensure that the expiration date is set on all secrets                                                                                                                                                    | Terraform      |
-| 238 | CKV_AZURE_41 | resource          | Microsoft.KeyVault/vaults/secrets                                            | Ensure that the expiration date is set on all secrets                                                                                                                                                    | arm            |
-| 239 | CKV_AZURE_42 | resource          | azurerm_key_vault                                                            | Ensure the key vault is recoverable                                                                                                                                                                      | Terraform      |
-| 240 | CKV_AZURE_42 | resource          | Microsoft.KeyVault/vaults                                                    | Ensure the key vault is recoverable                                                                                                                                                                      | arm            |
-| 241 | CKV_AZURE_44 | resource          | azurerm_storage_account                                                      | Ensure Storage Account is using the latest version of TLS encryption                                                                                                                                     | Terraform      |
-| 242 | CKV_GCP_1    | resource          | google_container_cluster                                                     | Ensure Stackdriver Logging is set to Enabled on Kubernetes Engine Clusters                                                                                                                               | Terraform      |
-| 243 | CKV_GCP_2    | resource          | google_compute_firewall                                                      | Ensure Google compute firewall ingress does not allow unrestricted ssh access                                                                                                                            | Terraform      |
-| 244 | CKV_GCP_3    | resource          | google_compute_firewall                                                      | Ensure Google compute firewall ingress does not allow unrestricted rdp access                                                                                                                            | Terraform      |
-| 245 | CKV_GCP_4    | resource          | google_compute_ssl_policy                                                    | Ensure no HTTPS or SSL proxy load balancers permit SSL policies with weak cipher suites                                                                                                                  | Terraform      |
-| 246 | CKV_GCP_5    | resource          | google_storage_bucket                                                        | Ensure Google storage bucket have encryption enabled                                                                                                                                                     | Terraform      |
-| 247 | CKV_GCP_6    | resource          | google_sql_database_instance                                                 | Ensure all Cloud SQL database instance requires all incoming connections to use SSL                                                                                                                      | Terraform      |
-| 248 | CKV_GCP_7    | resource          | google_container_cluster                                                     | Ensure Legacy Authorization is set to Disabled on Kubernetes Engine Clusters                                                                                                                             | Terraform      |
-| 249 | CKV_GCP_8    | resource          | google_container_cluster                                                     | Ensure Stackdriver Monitoring is set to Enabled on Kubernetes Engine Clusters                                                                                                                            | Terraform      |
-| 250 | CKV_GCP_9    | resource          | google_container_node_pool                                                   | Ensure 'Automatic node repair' is enabled for Kubernetes Clusters                                                                                                                                        | Terraform      |
-| 251 | CKV_GCP_10   | resource          | google_container_node_pool                                                   | Ensure 'Automatic node upgrade' is enabled for Kubernetes Clusters                                                                                                                                       | Terraform      |
-| 252 | CKV_GCP_11   | resource          | google_sql_database_instance                                                 | Ensure that Cloud SQL database Instances are not open to the world                                                                                                                                       | Terraform      |
-| 253 | CKV_GCP_12   | resource          | google_container_cluster                                                     | Ensure Network Policy is enabled on Kubernetes Engine Clusters                                                                                                                                           | Terraform      |
-| 254 | CKV_GCP_13   | resource          | google_container_cluster                                                     | Ensure a client certificate is used by clients to authenticate to Kubernetes Engine Clusters                                                                                                             | Terraform      |
-| 255 | CKV_GCP_14   | resource          | google_sql_database_instance                                                 | Ensure all Cloud SQL database instance have backup configuration enabled                                                                                                                                 | Terraform      |
-| 256 | CKV_GCP_15   | resource          | google_bigquery_dataset                                                      | Ensure that BigQuery datasets are not anonymously or publicly accessible                                                                                                                                 | Terraform      |
-| 257 | CKV_GCP_16   | resource          | google_dns_managed_zone                                                      | Ensure that DNSSEC is enabled for Cloud DNS                                                                                                                                                              | Terraform      |
-| 258 | CKV_GCP_17   | resource          | google_dns_managed_zone                                                      | Ensure that RSASHA1 is not used for the zone-signing and key-signing keys in Cloud DNS DNSSEC                                                                                                            | Terraform      |
-| 259 | CKV_GCP_18   | resource          | google_container_cluster                                                     | Ensure GKE Control Plane is not public                                                                                                                                                                   | Terraform      |
-| 260 | CKV_GCP_19   | resource          | google_container_cluster                                                     | Ensure GKE basic auth is disabled                                                                                                                                                                        | Terraform      |
-| 261 | CKV_GCP_20   | resource          | google_container_cluster                                                     | Ensure master authorized networks is set to enabled in GKE clusters                                                                                                                                      | Terraform      |
-| 262 | CKV_GCP_21   | resource          | google_container_cluster                                                     | Ensure Kubernetes Clusters are configured with Labels                                                                                                                                                    | Terraform      |
-| 263 | CKV_GCP_22   | resource          | google_container_node_pool                                                   | Ensure Container-Optimized OS (cos) is used for Kubernetes Engine Clusters Node image                                                                                                                    | Terraform      |
-| 264 | CKV_GCP_23   | resource          | google_container_cluster                                                     | Ensure Kubernetes Cluster is created with Alias IP ranges enabled                                                                                                                                        | Terraform      |
-| 265 | CKV_GCP_24   | resource          | google_container_cluster                                                     | Ensure PodSecurityPolicy controller is enabled on the Kubernetes Engine Clusters                                                                                                                         | Terraform      |
-| 266 | CKV_GCP_25   | resource          | google_container_cluster                                                     | Ensure Kubernetes Cluster is created with Private cluster enabled                                                                                                                                        | Terraform      |
-| 267 | CKV_GCP_26   | resource          | google_compute_subnetwork                                                    | Ensure that VPC Flow Logs is enabled for every subnet in a VPC Network                                                                                                                                   | Terraform      |
-| 268 | CKV_GCP_27   | resource          | google_project                                                               | Ensure that the default network does not exist in a project                                                                                                                                              | Terraform      |
-| 269 | CKV_GCP_28   | resource          | google_storage_bucket_iam_member                                             | Ensure that Cloud Storage bucket is not anonymously or publicly accessible                                                                                                                               | Terraform      |
-| 270 | CKV_GCP_28   | resource          | google_storage_bucket_iam_binding                                            | Ensure that Cloud Storage bucket is not anonymously or publicly accessible                                                                                                                               | Terraform      |
-| 271 | CKV_GCP_29   | resource          | google_storage_bucket                                                        | Ensure that Cloud Storage buckets have uniform bucket-level access enabled                                                                                                                               | Terraform      |
-| 272 | CKV_GCP_30   | resource          | google_compute_instance                                                      | Ensure that instances are not configured to use the default service account                                                                                                                              | Terraform      |
-| 273 | CKV_GCP_31   | resource          | google_compute_instance                                                      | Ensure that instances are not configured to use the default service account with full access to all Cloud APIs                                                                                           | Terraform      |
-| 274 | CKV_GCP_32   | resource          | google_compute_instance                                                      | Ensure 'Block Project-wide SSH keys' is enabled for VM instances                                                                                                                                         | Terraform      |
-| 275 | CKV_GCP_33   | resource          | google_compute_project_metadata                                              | Ensure oslogin is enabled for a Project                                                                                                                                                                  | Terraform      |
-| 276 | CKV_GCP_34   | resource          | google_compute_instance                                                      | Ensure that no instance in the project overrides the project setting for enabling OSLogin(OSLogin needs to be enabled in prject metadata for all instances)                                              | Terraform      |
-| 277 | CKV_GCP_35   | resource          | google_compute_instance                                                      | Ensure 'Enable connecting to serial ports' is not enabled for VM Instance                                                                                                                                | Terraform      |
-| 278 | CKV_GCP_36   | resource          | google_compute_instance                                                      | Ensure that IP forwarding is not enabled on Instances                                                                                                                                                    | Terraform      |
-| 279 | CKV_GCP_37   | resource          | google_compute_disk                                                          | Ensure VM disks for critical VMs are encrypted with Customer Supplied Encryption Keys (CSEK)                                                                                                             | Terraform      |
-| 280 | CKV_GCP_38   | resource          | google_compute_instance                                                      | Ensure VM disks for critical VMs are encrypted with Customer Supplied Encryption Keys (CSEK)                                                                                                             | Terraform      |
-| 281 | CKV_GCP_39   | resource          | google_compute_instance                                                      | Ensure Compute instances are launched with Shielded VM enabled                                                                                                                                           | Terraform      |
-| 282 | CKV_GCP_40   | resource          | google_compute_instance                                                      | Ensure that Compute instances do not have public IP addresses                                                                                                                                            | Terraform      |
-| 283 | CKV_GCP_41   | resource          | google_project_iam_member                                                    | Ensure that IAM users are not assigned the Service Account User or Service Account Token Creator roles at project level                                                                                  | Terraform      |
-| 284 | CKV_GCP_41   | resource          | google_project_iam_binding                                                   | Ensure that IAM users are not assigned the Service Account User or Service Account Token Creator roles at project level                                                                                  | Terraform      |
-| 285 | CKV_GCP_42   | resource          | google_project_iam_member                                                    | Ensure that Service Account has no Admin privileges                                                                                                                                                      | Terraform      |
-| 286 | CKV_GCP_43   | resource          | google_kms_crypto_key                                                        | Ensure KMS encryption keys are rotated within a period of 90 days                                                                                                                                        | Terraform      |
-| 287 | CKV_GCP_44   | resource          | google_folder_iam_member                                                     | Ensure no roles that enable to impersonate and manage all service accounts are used at a folder level                                                                                                    | Terraform      |
-| 288 | CKV_GCP_44   | resource          | google_folder_iam_binding                                                    | Ensure no roles that enable to impersonate and manage all service accounts are used at a folder level                                                                                                    | Terraform      |
-| 289 | CKV_GCP_45   | resource          | google_organization_iam_member                                               | Ensure no roles that enable to impersonate and manage all service accounts are used at an organization level                                                                                             | Terraform      |
-| 290 | CKV_GCP_45   | resource          | google_organization_iam_binding                                              | Ensure no roles that enable to impersonate and manage all service accounts are used at an organization level                                                                                             | Terraform      |
-| 291 | CKV_GCP_46   | resource          | google_project_iam_member                                                    | Ensure Default Service account is not used at a project level                                                                                                                                            | Terraform      |
-| 292 | CKV_GCP_46   | resource          | google_project_iam_binding                                                   | Ensure Default Service account is not used at a project level                                                                                                                                            | Terraform      |
-| 293 | CKV_GCP_47   | resource          | google_organization_iam_member                                               | Ensure default service account is not used at an organization level                                                                                                                                      | Terraform      |
-| 294 | CKV_GCP_47   | resource          | google_organization_iam_binding                                              | Ensure default service account is not used at an organization level                                                                                                                                      | Terraform      |
-| 295 | CKV_GCP_48   | resource          | google_folder_iam_member                                                     | Ensure Default Service account is not used at a folder level                                                                                                                                             | Terraform      |
-| 296 | CKV_GCP_48   | resource          | google_folder_iam_binding                                                    | Ensure Default Service account is not used at a folder level                                                                                                                                             | Terraform      |
-| 297 | CKV_GCP_49   | resource          | google_project_iam_member                                                    | Ensure no roles that enable to impersonate and manage all service accounts are used at a project level                                                                                                   | Terraform      |
-| 298 | CKV_GCP_49   | resource          | google_project_iam_binding                                                   | Ensure no roles that enable to impersonate and manage all service accounts are used at a project level                                                                                                   | Terraform      |
-| 299 | CKV_GIT_1    | resource          | github_repository                                                            | Ensure Repository is Private                                                                                                                                                                             | Terraform      |
-| 300 | CKV_K8S_1    | PodSecurityPolicy | PodSecurityPolicy                                                            | Do not admit containers wishing to share the host process ID namespace                                                                                                                                   | Kubernetes     |
-| 301 | CKV_K8S_2    | PodSecurityPolicy | PodSecurityPolicy                                                            | Do not admit privileged containers                                                                                                                                                                       | Kubernetes     |
-| 302 | CKV_K8S_3    | PodSecurityPolicy | PodSecurityPolicy                                                            | Do not admit containers wishing to share the host IPC namespace                                                                                                                                          | Kubernetes     |
-| 303 | CKV_K8S_4    | PodSecurityPolicy | PodSecurityPolicy                                                            | Do not admit containers wishing to share the host network namespace                                                                                                                                      | Kubernetes     |
-| 304 | CKV_K8S_5    | PodSecurityPolicy | PodSecurityPolicy                                                            | Containers should not run with allowPrivilegeEscalation                                                                                                                                                  | Kubernetes     |
-| 305 | CKV_K8S_6    | PodSecurityPolicy | PodSecurityPolicy                                                            | Do not admit root containers                                                                                                                                                                             | Kubernetes     |
-| 306 | CKV_K8S_7    | PodSecurityPolicy | PodSecurityPolicy                                                            | Do not admit containers with the NET_RAW capability                                                                                                                                                      | Kubernetes     |
-| 307 | CKV_K8S_8    | PodSecurityPolicy | containers                                                                   | Liveness Probe Should be Configured                                                                                                                                                                      | Kubernetes     |
-| 308 | CKV_K8S_9    | PodSecurityPolicy | containers                                                                   | Readiness Probe Should be Configured                                                                                                                                                                     | Kubernetes     |
-| 309 | CKV_K8S_10   | PodSecurityPolicy | containers                                                                   | CPU requests should be set                                                                                                                                                                               | Kubernetes     |
-| 310 | CKV_K8S_10   | PodSecurityPolicy | initContainers                                                               | CPU requests should be set                                                                                                                                                                               | Kubernetes     |
-| 311 | CKV_K8S_11   | PodSecurityPolicy | containers                                                                   | CPU limits should be set                                                                                                                                                                                 | Kubernetes     |
-| 312 | CKV_K8S_11   | PodSecurityPolicy | initContainers                                                               | CPU limits should be set                                                                                                                                                                                 | Kubernetes     |
-| 313 | CKV_K8S_12   | PodSecurityPolicy | containers                                                                   | Memory requests should be set                                                                                                                                                                            | Kubernetes     |
-| 314 | CKV_K8S_12   | PodSecurityPolicy | initContainers                                                               | Memory requests should be set                                                                                                                                                                            | Kubernetes     |
-| 315 | CKV_K8S_13   | PodSecurityPolicy | containers                                                                   | Memory limits should be set                                                                                                                                                                              | Kubernetes     |
-| 316 | CKV_K8S_13   | PodSecurityPolicy | initContainers                                                               | Memory limits should be set                                                                                                                                                                              | Kubernetes     |
-| 317 | CKV_K8S_14   | PodSecurityPolicy | containers                                                                   | Image Tag should be fixed - not latest or blank                                                                                                                                                          | Kubernetes     |
-| 318 | CKV_K8S_14   | PodSecurityPolicy | initContainers                                                               | Image Tag should be fixed - not latest or blank                                                                                                                                                          | Kubernetes     |
-| 319 | CKV_K8S_15   | PodSecurityPolicy | containers                                                                   | Image Pull Policy should be Always                                                                                                                                                                       | Kubernetes     |
-| 320 | CKV_K8S_15   | PodSecurityPolicy | initContainers                                                               | Image Pull Policy should be Always                                                                                                                                                                       | Kubernetes     |
-| 321 | CKV_K8S_16   | PodSecurityPolicy | containers                                                                   | Container should not be privileged                                                                                                                                                                       | Kubernetes     |
-| 322 | CKV_K8S_16   | PodSecurityPolicy | initContainers                                                               | Container should not be privileged                                                                                                                                                                       | Kubernetes     |
-| 323 | CKV_K8S_17   | PodSecurityPolicy | Pod                                                                          | Containers should not share the host process ID namespace                                                                                                                                                | Kubernetes     |
-| 324 | CKV_K8S_17   | PodSecurityPolicy | Deployment                                                                   | Containers should not share the host process ID namespace                                                                                                                                                | Kubernetes     |
-| 325 | CKV_K8S_17   | PodSecurityPolicy | DaemonSet                                                                    | Containers should not share the host process ID namespace                                                                                                                                                | Kubernetes     |
-| 326 | CKV_K8S_17   | PodSecurityPolicy | StatefulSet                                                                  | Containers should not share the host process ID namespace                                                                                                                                                | Kubernetes     |
-| 327 | CKV_K8S_17   | PodSecurityPolicy | ReplicaSet                                                                   | Containers should not share the host process ID namespace                                                                                                                                                | Kubernetes     |
-| 328 | CKV_K8S_17   | PodSecurityPolicy | ReplicationController                                                        | Containers should not share the host process ID namespace                                                                                                                                                | Kubernetes     |
-| 329 | CKV_K8S_17   | PodSecurityPolicy | Job                                                                          | Containers should not share the host process ID namespace                                                                                                                                                | Kubernetes     |
-| 330 | CKV_K8S_17   | PodSecurityPolicy | CronJob                                                                      | Containers should not share the host process ID namespace                                                                                                                                                | Kubernetes     |
-| 331 | CKV_K8S_18   | PodSecurityPolicy | Pod                                                                          | Containers should not share the host IPC namespace                                                                                                                                                       | Kubernetes     |
-| 332 | CKV_K8S_18   | PodSecurityPolicy | Deployment                                                                   | Containers should not share the host IPC namespace                                                                                                                                                       | Kubernetes     |
-| 333 | CKV_K8S_18   | PodSecurityPolicy | DaemonSet                                                                    | Containers should not share the host IPC namespace                                                                                                                                                       | Kubernetes     |
-| 334 | CKV_K8S_18   | PodSecurityPolicy | StatefulSet                                                                  | Containers should not share the host IPC namespace                                                                                                                                                       | Kubernetes     |
-| 335 | CKV_K8S_18   | PodSecurityPolicy | ReplicaSet                                                                   | Containers should not share the host IPC namespace                                                                                                                                                       | Kubernetes     |
-| 336 | CKV_K8S_18   | PodSecurityPolicy | ReplicationController                                                        | Containers should not share the host IPC namespace                                                                                                                                                       | Kubernetes     |
-| 337 | CKV_K8S_18   | PodSecurityPolicy | Job                                                                          | Containers should not share the host IPC namespace                                                                                                                                                       | Kubernetes     |
-| 338 | CKV_K8S_18   | PodSecurityPolicy | CronJob                                                                      | Containers should not share the host IPC namespace                                                                                                                                                       | Kubernetes     |
-| 339 | CKV_K8S_19   | PodSecurityPolicy | Pod                                                                          | Containers should not share the host network namespace                                                                                                                                                   | Kubernetes     |
-| 340 | CKV_K8S_19   | PodSecurityPolicy | Deployment                                                                   | Containers should not share the host network namespace                                                                                                                                                   | Kubernetes     |
-| 341 | CKV_K8S_19   | PodSecurityPolicy | DaemonSet                                                                    | Containers should not share the host network namespace                                                                                                                                                   | Kubernetes     |
-| 342 | CKV_K8S_19   | PodSecurityPolicy | StatefulSet                                                                  | Containers should not share the host network namespace                                                                                                                                                   | Kubernetes     |
-| 343 | CKV_K8S_19   | PodSecurityPolicy | ReplicaSet                                                                   | Containers should not share the host network namespace                                                                                                                                                   | Kubernetes     |
-| 344 | CKV_K8S_19   | PodSecurityPolicy | ReplicationController                                                        | Containers should not share the host network namespace                                                                                                                                                   | Kubernetes     |
-| 345 | CKV_K8S_19   | PodSecurityPolicy | Job                                                                          | Containers should not share the host network namespace                                                                                                                                                   | Kubernetes     |
-| 346 | CKV_K8S_19   | PodSecurityPolicy | CronJob                                                                      | Containers should not share the host network namespace                                                                                                                                                   | Kubernetes     |
-| 347 | CKV_K8S_20   | PodSecurityPolicy | containers                                                                   | Containers should not run with allowPrivilegeEscalation                                                                                                                                                  | Kubernetes     |
-| 348 | CKV_K8S_20   | PodSecurityPolicy | initContainers                                                               | Containers should not run with allowPrivilegeEscalation                                                                                                                                                  | Kubernetes     |
-| 349 | CKV_K8S_21   | PodSecurityPolicy | Pod                                                                          | The default namespace should not be used                                                                                                                                                                 | Kubernetes     |
-| 350 | CKV_K8S_21   | PodSecurityPolicy | Deployment                                                                   | The default namespace should not be used                                                                                                                                                                 | Kubernetes     |
-| 351 | CKV_K8S_21   | PodSecurityPolicy | DaemonSet                                                                    | The default namespace should not be used                                                                                                                                                                 | Kubernetes     |
-| 352 | CKV_K8S_21   | PodSecurityPolicy | StatefulSet                                                                  | The default namespace should not be used                                                                                                                                                                 | Kubernetes     |
-| 353 | CKV_K8S_21   | PodSecurityPolicy | ReplicaSet                                                                   | The default namespace should not be used                                                                                                                                                                 | Kubernetes     |
-| 354 | CKV_K8S_21   | PodSecurityPolicy | ReplicationController                                                        | The default namespace should not be used                                                                                                                                                                 | Kubernetes     |
-| 355 | CKV_K8S_21   | PodSecurityPolicy | Job                                                                          | The default namespace should not be used                                                                                                                                                                 | Kubernetes     |
-| 356 | CKV_K8S_21   | PodSecurityPolicy | CronJob                                                                      | The default namespace should not be used                                                                                                                                                                 | Kubernetes     |
-| 357 | CKV_K8S_21   | PodSecurityPolicy | Service                                                                      | The default namespace should not be used                                                                                                                                                                 | Kubernetes     |
-| 358 | CKV_K8S_21   | PodSecurityPolicy | Secret                                                                       | The default namespace should not be used                                                                                                                                                                 | Kubernetes     |
-| 359 | CKV_K8S_21   | PodSecurityPolicy | ServiceAccount                                                               | The default namespace should not be used                                                                                                                                                                 | Kubernetes     |
-| 360 | CKV_K8S_21   | PodSecurityPolicy | Role                                                                         | The default namespace should not be used                                                                                                                                                                 | Kubernetes     |
-| 361 | CKV_K8S_21   | PodSecurityPolicy | RoleBinding                                                                  | The default namespace should not be used                                                                                                                                                                 | Kubernetes     |
-| 362 | CKV_K8S_21   | PodSecurityPolicy | ConfigMap                                                                    | The default namespace should not be used                                                                                                                                                                 | Kubernetes     |
-| 363 | CKV_K8S_21   | PodSecurityPolicy | Ingress                                                                      | The default namespace should not be used                                                                                                                                                                 | Kubernetes     |
-| 364 | CKV_K8S_22   | PodSecurityPolicy | containers                                                                   | Use read-only filesystem for containers where possible                                                                                                                                                   | Kubernetes     |
-| 365 | CKV_K8S_22   | PodSecurityPolicy | initContainers                                                               | Use read-only filesystem for containers where possible                                                                                                                                                   | Kubernetes     |
-| 366 | CKV_K8S_23   | PodSecurityPolicy | Pod                                                                          | Minimize the admission of root containers                                                                                                                                                                | Kubernetes     |
-| 367 | CKV_K8S_23   | PodSecurityPolicy | Deployment                                                                   | Minimize the admission of root containers                                                                                                                                                                | Kubernetes     |
-| 368 | CKV_K8S_23   | PodSecurityPolicy | DaemonSet                                                                    | Minimize the admission of root containers                                                                                                                                                                | Kubernetes     |
-| 369 | CKV_K8S_23   | PodSecurityPolicy | StatefulSet                                                                  | Minimize the admission of root containers                                                                                                                                                                | Kubernetes     |
-| 370 | CKV_K8S_23   | PodSecurityPolicy | ReplicaSet                                                                   | Minimize the admission of root containers                                                                                                                                                                | Kubernetes     |
-| 371 | CKV_K8S_23   | PodSecurityPolicy | ReplicationController                                                        | Minimize the admission of root containers                                                                                                                                                                | Kubernetes     |
-| 372 | CKV_K8S_23   | PodSecurityPolicy | Job                                                                          | Minimize the admission of root containers                                                                                                                                                                | Kubernetes     |
-| 373 | CKV_K8S_23   | PodSecurityPolicy | CronJob                                                                      | Minimize the admission of root containers                                                                                                                                                                | Kubernetes     |
-| 374 | CKV_K8S_24   | PodSecurityPolicy | PodSecurityPolicy                                                            | Do not allow containers with added capability                                                                                                                                                            | Kubernetes     |
-| 375 | CKV_K8S_25   | PodSecurityPolicy | containers                                                                   | Minimize the admission of containers with added capability                                                                                                                                               | Kubernetes     |
-| 376 | CKV_K8S_25   | PodSecurityPolicy | initContainers                                                               | Minimize the admission of containers with added capability                                                                                                                                               | Kubernetes     |
-| 377 | CKV_K8S_26   | PodSecurityPolicy | containers                                                                   | Do not specify hostPort unless absolutely necessary                                                                                                                                                      | Kubernetes     |
-| 378 | CKV_K8S_26   | PodSecurityPolicy | initContainers                                                               | Do not specify hostPort unless absolutely necessary                                                                                                                                                      | Kubernetes     |
-| 379 | CKV_K8S_27   | PodSecurityPolicy | Pod                                                                          | Do not expose the docker daemon socket to containers                                                                                                                                                     | Kubernetes     |
-| 380 | CKV_K8S_27   | PodSecurityPolicy | Deployment                                                                   | Do not expose the docker daemon socket to containers                                                                                                                                                     | Kubernetes     |
-| 381 | CKV_K8S_27   | PodSecurityPolicy | DaemonSet                                                                    | Do not expose the docker daemon socket to containers                                                                                                                                                     | Kubernetes     |
-| 382 | CKV_K8S_27   | PodSecurityPolicy | StatefulSet                                                                  | Do not expose the docker daemon socket to containers                                                                                                                                                     | Kubernetes     |
-| 383 | CKV_K8S_27   | PodSecurityPolicy | ReplicaSet                                                                   | Do not expose the docker daemon socket to containers                                                                                                                                                     | Kubernetes     |
-| 384 | CKV_K8S_27   | PodSecurityPolicy | ReplicationController                                                        | Do not expose the docker daemon socket to containers                                                                                                                                                     | Kubernetes     |
-| 385 | CKV_K8S_27   | PodSecurityPolicy | Job                                                                          | Do not expose the docker daemon socket to containers                                                                                                                                                     | Kubernetes     |
-| 386 | CKV_K8S_27   | PodSecurityPolicy | CronJob                                                                      | Do not expose the docker daemon socket to containers                                                                                                                                                     | Kubernetes     |
-| 387 | CKV_K8S_28   | PodSecurityPolicy | containers                                                                   | Minimize the admission of containers with the NET_RAW capability                                                                                                                                         | Kubernetes     |
-| 388 | CKV_K8S_28   | PodSecurityPolicy | initContainers                                                               | Minimize the admission of containers with the NET_RAW capability                                                                                                                                         | Kubernetes     |
-| 389 | CKV_K8S_29   | PodSecurityPolicy | Pod                                                                          | Apply security context to your pods and containers                                                                                                                                                       | Kubernetes     |
-| 390 | CKV_K8S_29   | PodSecurityPolicy | Deployment                                                                   | Apply security context to your pods and containers                                                                                                                                                       | Kubernetes     |
-| 391 | CKV_K8S_29   | PodSecurityPolicy | DaemonSet                                                                    | Apply security context to your pods and containers                                                                                                                                                       | Kubernetes     |
-| 392 | CKV_K8S_29   | PodSecurityPolicy | StatefulSet                                                                  | Apply security context to your pods and containers                                                                                                                                                       | Kubernetes     |
-| 393 | CKV_K8S_29   | PodSecurityPolicy | ReplicaSet                                                                   | Apply security context to your pods and containers                                                                                                                                                       | Kubernetes     |
-| 394 | CKV_K8S_29   | PodSecurityPolicy | ReplicationController                                                        | Apply security context to your pods and containers                                                                                                                                                       | Kubernetes     |
-| 395 | CKV_K8S_29   | PodSecurityPolicy | Job                                                                          | Apply security context to your pods and containers                                                                                                                                                       | Kubernetes     |
-| 396 | CKV_K8S_29   | PodSecurityPolicy | CronJob                                                                      | Apply security context to your pods and containers                                                                                                                                                       | Kubernetes     |
-| 397 | CKV_K8S_30   | PodSecurityPolicy | containers                                                                   | Apply security context to your pods and containers                                                                                                                                                       | Kubernetes     |
-| 398 | CKV_K8S_30   | PodSecurityPolicy | initContainers                                                               | Apply security context to your pods and containers                                                                                                                                                       | Kubernetes     |
-| 399 | CKV_K8S_31   | PodSecurityPolicy | Pod                                                                          | Ensure that the seccomp profile is set to docker/default or runtime/default                                                                                                                              | Kubernetes     |
-| 400 | CKV_K8S_31   | PodSecurityPolicy | Deployment                                                                   | Ensure that the seccomp profile is set to docker/default or runtime/default                                                                                                                              | Kubernetes     |
-| 401 | CKV_K8S_31   | PodSecurityPolicy | DaemonSet                                                                    | Ensure that the seccomp profile is set to docker/default or runtime/default                                                                                                                              | Kubernetes     |
-| 402 | CKV_K8S_31   | PodSecurityPolicy | StatefulSet                                                                  | Ensure that the seccomp profile is set to docker/default or runtime/default                                                                                                                              | Kubernetes     |
-| 403 | CKV_K8S_31   | PodSecurityPolicy | ReplicaSet                                                                   | Ensure that the seccomp profile is set to docker/default or runtime/default                                                                                                                              | Kubernetes     |
-| 404 | CKV_K8S_31   | PodSecurityPolicy | ReplicationController                                                        | Ensure that the seccomp profile is set to docker/default or runtime/default                                                                                                                              | Kubernetes     |
-| 405 | CKV_K8S_31   | PodSecurityPolicy | Job                                                                          | Ensure that the seccomp profile is set to docker/default or runtime/default                                                                                                                              | Kubernetes     |
-| 406 | CKV_K8S_31   | PodSecurityPolicy | CronJob                                                                      | Ensure that the seccomp profile is set to docker/default or runtime/default                                                                                                                              | Kubernetes     |
-| 407 | CKV_K8S_32   | PodSecurityPolicy | PodSecurityPolicy                                                            | Ensure default seccomp profile set to docker/default or runtime/default                                                                                                                                  | Kubernetes     |
-| 408 | CKV_K8S_33   | PodSecurityPolicy | containers                                                                   | Ensure the Kubernetes dashboard is not deployed                                                                                                                                                          | Kubernetes     |
-| 409 | CKV_K8S_33   | PodSecurityPolicy | initContainers                                                               | Ensure the Kubernetes dashboard is not deployed                                                                                                                                                          | Kubernetes     |
-| 410 | CKV_K8S_34   | PodSecurityPolicy | containers                                                                   | Ensure that Tiller (Helm v2) is not deployed                                                                                                                                                             | Kubernetes     |
-| 411 | CKV_K8S_34   | PodSecurityPolicy | initContainers                                                               | Ensure that Tiller (Helm v2) is not deployed                                                                                                                                                             | Kubernetes     |
-| 412 | CKV_K8S_35   | PodSecurityPolicy | containers                                                                   | Prefer using secrets as files over secrets as environment variables                                                                                                                                      | Kubernetes     |
-| 413 | CKV_K8S_35   | PodSecurityPolicy | initContainers                                                               | Prefer using secrets as files over secrets as environment variables                                                                                                                                      | Kubernetes     |
-| 414 | CKV_K8S_36   | PodSecurityPolicy | PodSecurityPolicy                                                            | Minimize the admission of containers with capabilities assigned                                                                                                                                          | Kubernetes     |
-| 415 | CKV_K8S_37   | PodSecurityPolicy | containers                                                                   | Minimize the admission of containers with capabilities assigned                                                                                                                                          | Kubernetes     |
-| 416 | CKV_K8S_37   | PodSecurityPolicy | initContainers                                                               | Minimize the admission of containers with capabilities assigned                                                                                                                                          | Kubernetes     |
-| 417 | CKV_K8S_38   | PodSecurityPolicy | Pod                                                                          | Ensure that Service Account Tokens are only mounted where necessary                                                                                                                                      | Kubernetes     |
-| 418 | CKV_K8S_38   | PodSecurityPolicy | Deployment                                                                   | Ensure that Service Account Tokens are only mounted where necessary                                                                                                                                      | Kubernetes     |
-| 419 | CKV_K8S_38   | PodSecurityPolicy | DaemonSet                                                                    | Ensure that Service Account Tokens are only mounted where necessary                                                                                                                                      | Kubernetes     |
-| 420 | CKV_K8S_38   | PodSecurityPolicy | StatefulSet                                                                  | Ensure that Service Account Tokens are only mounted where necessary                                                                                                                                      | Kubernetes     |
-| 421 | CKV_K8S_38   | PodSecurityPolicy | ReplicaSet                                                                   | Ensure that Service Account Tokens are only mounted where necessary                                                                                                                                      | Kubernetes     |
-| 422 | CKV_K8S_38   | PodSecurityPolicy | ReplicationController                                                        | Ensure that Service Account Tokens are only mounted where necessary                                                                                                                                      | Kubernetes     |
-| 423 | CKV_K8S_38   | PodSecurityPolicy | Job                                                                          | Ensure that Service Account Tokens are only mounted where necessary                                                                                                                                      | Kubernetes     |
-| 424 | CKV_K8S_38   | PodSecurityPolicy | CronJob                                                                      | Ensure that Service Account Tokens are only mounted where necessary                                                                                                                                      | Kubernetes     |
-| 425 | CKV_K8S_39   | PodSecurityPolicy | containers                                                                   | Do not use the CAP_SYS_ADMIN linux capability                                                                                                                                                            | Kubernetes     |
-| 426 | CKV_K8S_39   | PodSecurityPolicy | initContainers                                                               | Do not use the CAP_SYS_ADMIN linux capability                                                                                                                                                            | Kubernetes     |
-| 427 | CKV_K8S_40   | PodSecurityPolicy | Pod                                                                          | Containers should run as a high UID to avoid host conflict                                                                                                                                               | Kubernetes     |
-| 428 | CKV_K8S_40   | PodSecurityPolicy | Deployment                                                                   | Containers should run as a high UID to avoid host conflict                                                                                                                                               | Kubernetes     |
-| 429 | CKV_K8S_40   | PodSecurityPolicy | DaemonSet                                                                    | Containers should run as a high UID to avoid host conflict                                                                                                                                               | Kubernetes     |
-| 430 | CKV_K8S_40   | PodSecurityPolicy | StatefulSet                                                                  | Containers should run as a high UID to avoid host conflict                                                                                                                                               | Kubernetes     |
-| 431 | CKV_K8S_40   | PodSecurityPolicy | ReplicaSet                                                                   | Containers should run as a high UID to avoid host conflict                                                                                                                                               | Kubernetes     |
-| 432 | CKV_K8S_40   | PodSecurityPolicy | ReplicationController                                                        | Containers should run as a high UID to avoid host conflict                                                                                                                                               | Kubernetes     |
-| 433 | CKV_K8S_40   | PodSecurityPolicy | Job                                                                          | Containers should run as a high UID to avoid host conflict                                                                                                                                               | Kubernetes     |
-| 434 | CKV_K8S_40   | PodSecurityPolicy | CronJob                                                                      | Containers should run as a high UID to avoid host conflict                                                                                                                                               | Kubernetes     |
-| 435 | CKV_K8S_41   | PodSecurityPolicy | ServiceAccount                                                               | Ensure that default service accounts are not actively used                                                                                                                                               | Kubernetes     |
-| 436 | CKV_K8S_42   | PodSecurityPolicy | RoleBinding                                                                  | Ensure that default service accounts are not actively used                                                                                                                                               | Kubernetes     |
-| 437 | CKV_K8S_42   | PodSecurityPolicy | ClusterRoleBinding                                                           | Ensure that default service accounts are not actively used                                                                                                                                               | Kubernetes     |
-| 438 | CKV_K8S_43   | PodSecurityPolicy | containers                                                                   | Image should use digest                                                                                                                                                                                  | Kubernetes     |
-| 439 | CKV_K8S_43   | PodSecurityPolicy | initContainers                                                               | Image should use digest                                                                                                                                                                                  | Kubernetes     |
-| 440 | CKV_K8S_44   | PodSecurityPolicy | Service                                                                      | Ensure that the Tiller Service (Helm v2) is deleted                                                                                                                                                      | Kubernetes     |
-| 441 | CKV_K8S_45   | PodSecurityPolicy | containers                                                                   | Ensure the Tiller Deployment (Helm V2) is not accessible from within the cluster                                                                                                                         | Kubernetes     |
-| 442 | CKV_K8S_45   | PodSecurityPolicy | initContainers                                                               | Ensure the Tiller Deployment (Helm V2) is not accessible from within the cluster                                                                                                                         | Kubernetes     |
+| 135 | CKV_AWS_74   | resource          | aws_docdb_cluster                                                            | Ensure DocDB is encrypted at rest (default is unencrypted)                                                                                                                                               | Terraform      |
+| 136 | CKV_AWS_74   | resource          | aws_docdb_cluster_instance                                                   | Ensure DocDB is encrypted at rest (default is unencrypted)                                                                                                                                               | Terraform      |
+| 137 | CKV_AZURE_1  | resource          | azurerm_virtual_machine                                                      | Ensure Azure Instance does not use basic authentication(Use SSH Key Instead)                                                                                                                             | Terraform      |
+| 138 | CKV_AZURE_1  | resource          | azurerm_linux_virtual_machine                                                | Ensure Azure Instance does not use basic authentication(Use SSH Key Instead)                                                                                                                             | Terraform      |
+| 139 | CKV_AZURE_1  | resource          | Microsoft.Compute/virtualMachines                                            | Ensure Azure Instance does not use basic authentication(Use SSH Key Instead)                                                                                                                             | arm            |
+| 140 | CKV_AZURE_2  | resource          | azurerm_managed_disk                                                         | Ensure Azure managed disk have encryption enabled                                                                                                                                                        | Terraform      |
+| 141 | CKV_AZURE_2  | resource          | Microsoft.Compute/disks                                                      | Ensure Azure managed disk have encryption enabled                                                                                                                                                        | arm            |
+| 142 | CKV_AZURE_3  | resource          | azurerm_storage_account                                                      | Ensure that 'Secure transfer required' is set to 'Enabled'                                                                                                                                               | Terraform      |
+| 143 | CKV_AZURE_3  | resource          | Microsoft.Storage/storageAccounts                                            | Ensure that 'supportsHttpsTrafficOnly' is set to 'true'                                                                                                                                                  | arm            |
+| 144 | CKV_AZURE_4  | resource          | azurerm_kubernetes_cluster                                                   | Ensure AKS logging to Azure Monitoring is Configured                                                                                                                                                     | Terraform      |
+| 145 | CKV_AZURE_4  | resource          | Microsoft.ContainerService/managedClusters                                   | Ensure AKS logging to Azure Monitoring is Configured                                                                                                                                                     | arm            |
+| 146 | CKV_AZURE_5  | resource          | azurerm_kubernetes_cluster                                                   | Ensure RBAC is enabled on AKS clusters                                                                                                                                                                   | Terraform      |
+| 147 | CKV_AZURE_5  | resource          | Microsoft.ContainerService/managedClusters                                   | Ensure RBAC is enabled on AKS clusters                                                                                                                                                                   | arm            |
+| 148 | CKV_AZURE_6  | resource          | azurerm_kubernetes_cluster                                                   | Ensure AKS has an API Server Authorized IP Ranges enabled                                                                                                                                                | Terraform      |
+| 149 | CKV_AZURE_6  | resource          | Microsoft.ContainerService/managedClusters                                   | Ensure AKS has an API Server Authorized IP Ranges enabled                                                                                                                                                | arm            |
+| 150 | CKV_AZURE_7  | resource          | azurerm_kubernetes_cluster                                                   | Ensure AKS cluster has Network Policy configured                                                                                                                                                         | Terraform      |
+| 151 | CKV_AZURE_7  | resource          | Microsoft.ContainerService/managedClusters                                   | Ensure AKS cluster has Network Policy configured                                                                                                                                                         | arm            |
+| 152 | CKV_AZURE_8  | resource          | azurerm_kubernetes_cluster                                                   | Ensure Kube Dashboard is disabled                                                                                                                                                                        | Terraform      |
+| 153 | CKV_AZURE_8  | resource          | Microsoft.ContainerService/managedClusters                                   | Ensure Kubernetes Dashboard is disabled                                                                                                                                                                  | arm            |
+| 154 | CKV_AZURE_9  | resource          | azure_security_group_rule                                                    | Ensure that RDP access is restricted from the internet                                                                                                                                                   | Terraform      |
+| 155 | CKV_AZURE_9  | resource          | azurerm_network_security_rule                                                | Ensure that RDP access is restricted from the internet                                                                                                                                                   | Terraform      |
+| 156 | CKV_AZURE_9  | resource          | azurerm_network_security_group                                               | Ensure that RDP access is restricted from the internet                                                                                                                                                   | Terraform      |
+| 157 | CKV_AZURE_9  | resource          | Microsoft.Network/networkSecurityGroups                                      | Ensure that RDP access is restricted from the internet                                                                                                                                                   | arm            |
+| 158 | CKV_AZURE_9  | resource          | Microsoft.Network/networkSecurityGroups/securityRules                        | Ensure that RDP access is restricted from the internet                                                                                                                                                   | arm            |
+| 159 | CKV_AZURE_10 | resource          | azure_security_group_rule                                                    | Ensure that SSH access is restricted from the internet                                                                                                                                                   | Terraform      |
+| 160 | CKV_AZURE_10 | resource          | azurerm_network_security_rule                                                | Ensure that SSH access is restricted from the internet                                                                                                                                                   | Terraform      |
+| 161 | CKV_AZURE_10 | resource          | azurerm_network_security_group                                               | Ensure that SSH access is restricted from the internet                                                                                                                                                   | Terraform      |
+| 162 | CKV_AZURE_10 | resource          | Microsoft.Network/networkSecurityGroups                                      | Ensure that SSH access is restricted from the internet                                                                                                                                                   | arm            |
+| 163 | CKV_AZURE_10 | resource          | Microsoft.Network/networkSecurityGroups/securityRules                        | Ensure that SSH access is restricted from the internet                                                                                                                                                   | arm            |
+| 164 | CKV_AZURE_11 | resource          | azurerm_mariadb_firewall_rule                                                | Ensure no SQL Databases allow ingress from 0.0.0.0/0 (ANY IP)                                                                                                                                            | Terraform      |
+| 165 | CKV_AZURE_11 | resource          | azurerm_sql_firewall_rule                                                    | Ensure no SQL Databases allow ingress from 0.0.0.0/0 (ANY IP)                                                                                                                                            | Terraform      |
+| 166 | CKV_AZURE_11 | resource          | azurerm_postgresql_firewall_rule                                             | Ensure no SQL Databases allow ingress from 0.0.0.0/0 (ANY IP)                                                                                                                                            | Terraform      |
+| 167 | CKV_AZURE_11 | resource          | azurerm_mysql_firewall_rule                                                  | Ensure no SQL Databases allow ingress from 0.0.0.0/0 (ANY IP)                                                                                                                                            | Terraform      |
+| 168 | CKV_AZURE_11 | resource          | Microsoft.Sql/servers                                                        | Ensure no SQL Databases allow ingress from 0.0.0.0/0 (ANY IP)                                                                                                                                            | arm            |
+| 169 | CKV_AZURE_12 | resource          | azurerm_network_watcher_flow_log                                             | Ensure that Network Security Group Flow Log retention period is 'greater than 90 days'                                                                                                                   | Terraform      |
+| 170 | CKV_AZURE_12 | resource          | Microsoft.Network/networkWatchers/flowLogs                                   | Ensure that Network Security Group Flow Log retention period is 'greater than 90 days'                                                                                                                   | arm            |
+| 171 | CKV_AZURE_12 | resource          | Microsoft.Network/networkWatchers/FlowLogs                                   | Ensure that Network Security Group Flow Log retention period is 'greater than 90 days'                                                                                                                   | arm            |
+| 172 | CKV_AZURE_12 | resource          | Microsoft.Network/networkWatchers/flowLogs/                                  | Ensure that Network Security Group Flow Log retention period is 'greater than 90 days'                                                                                                                   | arm            |
+| 173 | CKV_AZURE_12 | resource          | Microsoft.Network/networkWatchers/FlowLogs/                                  | Ensure that Network Security Group Flow Log retention period is 'greater than 90 days'                                                                                                                   | arm            |
+| 174 | CKV_AZURE_13 | resource          | azurerm_app_service                                                          | Ensure App Service Authentication is set on Azure App Service                                                                                                                                            | Terraform      |
+| 175 | CKV_AZURE_13 | resource          | Microsoft.Web/sites/config                                                   | Ensure App Service Authentication is set on Azure App Service                                                                                                                                            | arm            |
+| 176 | CKV_AZURE_13 | resource          | config                                                                       | Ensure App Service Authentication is set on Azure App Service                                                                                                                                            | arm            |
+| 177 | CKV_AZURE_14 | resource          | azurerm_app_service                                                          | Ensure web app redirects all HTTP traffic to HTTPS in Azure App Service                                                                                                                                  | Terraform      |
+| 178 | CKV_AZURE_14 | resource          | Microsoft.Web/sites                                                          | Ensure web app redirects all HTTP traffic to HTTPS in Azure App Service                                                                                                                                  | arm            |
+| 179 | CKV_AZURE_15 | resource          | azurerm_app_service                                                          | Ensure web app is using the latest version of TLS encryption                                                                                                                                             | Terraform      |
+| 180 | CKV_AZURE_15 | resource          | Microsoft.Web/sites                                                          | Ensure web app is using the latest version of TLS encryption                                                                                                                                             | arm            |
+| 181 | CKV_AZURE_16 | resource          | azurerm_app_service                                                          | Ensure that Register with Azure Active Directory is enabled on App Service                                                                                                                               | Terraform      |
+| 182 | CKV_AZURE_16 | resource          | Microsoft.Web/sites                                                          | Ensure that Register with Azure Active Directory is enabled on App Service                                                                                                                               | arm            |
+| 183 | CKV_AZURE_17 | resource          | azurerm_app_service                                                          | Ensure the web app has 'Client Certificates (Incoming client certificates)' set                                                                                                                          | Terraform      |
+| 184 | CKV_AZURE_17 | resource          | Microsoft.Web/sites                                                          | Ensure the web app has 'Client Certificates (Incoming client certificates)' set                                                                                                                          | arm            |
+| 185 | CKV_AZURE_18 | resource          | azurerm_app_service                                                          | Ensure that 'HTTP Version' is the latest if used to run the web app                                                                                                                                      | Terraform      |
+| 186 | CKV_AZURE_18 | resource          | Microsoft.Web/sites                                                          | Ensure that 'HTTP Version' is the latest if used to run the web app                                                                                                                                      | arm            |
+| 187 | CKV_AZURE_19 | resource          | azurerm_security_center_subscription_pricing                                 | Ensure that standard pricing tier is selected                                                                                                                                                            | Terraform      |
+| 188 | CKV_AZURE_19 | resource          | Microsoft.Security/pricings                                                  | Ensure that standard pricing tier is selected                                                                                                                                                            | arm            |
+| 189 | CKV_AZURE_20 | resource          | azurerm_security_center_contact                                              | Ensure that security contact 'Phone number' is set                                                                                                                                                       | Terraform      |
+| 190 | CKV_AZURE_20 | resource          | Microsoft.Security/securityContacts                                          | Ensure that security contact 'Phone number' is set                                                                                                                                                       | arm            |
+| 191 | CKV_AZURE_21 | resource          | azurerm_security_center_contact                                              | Ensure that 'Send email notification for high severity alerts' is set to 'On'                                                                                                                            | Terraform      |
+| 192 | CKV_AZURE_21 | resource          | Microsoft.Security/securityContacts                                          | Ensure that 'Send email notification for high severity alerts' is set to 'On'                                                                                                                            | arm            |
+| 193 | CKV_AZURE_22 | resource          | azurerm_security_center_contact                                              | Ensure that 'Send email notification for high severity alerts' is set to 'On'                                                                                                                            | Terraform      |
+| 194 | CKV_AZURE_22 | resource          | Microsoft.Security/securityContacts                                          | Ensure that 'Send email notification for high severity alerts' is set to 'On'                                                                                                                            | arm            |
+| 195 | CKV_AZURE_23 | resource          | azurerm_sql_server                                                           | Ensure that 'Auditing' is set to 'On' for SQL servers                                                                                                                                                    | Terraform      |
+| 196 | CKV_AZURE_23 | resource          | azurerm_mssql_server                                                         | Ensure that 'Auditing' is set to 'On' for SQL servers                                                                                                                                                    | Terraform      |
+| 197 | CKV_AZURE_23 | resource          | Microsoft.Sql/servers                                                        | Ensure that 'Auditing' is set to 'Enabled' for SQL servers                                                                                                                                               | arm            |
+| 198 | CKV_AZURE_24 | resource          | azurerm_sql_server                                                           | Ensure that 'Auditing' Retention is 'greater than 90 days' for SQL servers                                                                                                                               | Terraform      |
+| 199 | CKV_AZURE_24 | resource          | azurerm_mssql_server                                                         | Ensure that 'Auditing' Retention is 'greater than 90 days' for SQL servers                                                                                                                               | Terraform      |
+| 200 | CKV_AZURE_24 | resource          | Microsoft.Sql/servers                                                        | Ensure that 'Auditing' Retention is 'greater than 90 days' for SQL servers                                                                                                                               | arm            |
+| 201 | CKV_AZURE_25 | resource          | azurerm_mssql_server_security_alert_policy                                   | Ensure that 'Threat Detection types' is set to 'All'                                                                                                                                                     | Terraform      |
+| 202 | CKV_AZURE_25 | resource          | Microsoft.Sql/servers/databases                                              | Ensure that 'Threat Detection types' is set to 'All'                                                                                                                                                     | arm            |
+| 203 | CKV_AZURE_26 | resource          | azurerm_mssql_server_security_alert_policy                                   | Ensure that 'Send Alerts To' is enabled for MSSQL servers                                                                                                                                                | Terraform      |
+| 204 | CKV_AZURE_26 | resource          | Microsoft.Sql/servers/databases                                              | Ensure that 'Send Alerts To' is enabled for MSSQL servers                                                                                                                                                | arm            |
+| 205 | CKV_AZURE_27 | resource          | azurerm_mssql_server_security_alert_policy                                   | Ensure that 'Email service and co-administrators' is 'Enabled' for MSSQL servers                                                                                                                         | Terraform      |
+| 206 | CKV_AZURE_27 | resource          | Microsoft.Sql/servers/databases                                              | Ensure that 'Email service and co-administrators' is 'Enabled' for MSSQL servers                                                                                                                         | arm            |
+| 207 | CKV_AZURE_28 | resource          | azurerm_mysql_server                                                         | Ensure 'Enforce SSL connection' is set to 'ENABLED' for MySQL Database Server                                                                                                                            | Terraform      |
+| 208 | CKV_AZURE_28 | resource          | Microsoft.DBforMySQL/servers                                                 | Ensure 'Enforce SSL connection' is set to 'ENABLED' for MySQL Database Server                                                                                                                            | arm            |
+| 209 | CKV_AZURE_29 | resource          | azurerm_postgresql_server                                                    | Ensure 'Enforce SSL connection' is set to 'ENABLED' for PostgreSQL Database Server                                                                                                                       | Terraform      |
+| 210 | CKV_AZURE_29 | resource          | Microsoft.DBforPostgreSQL/servers                                            | Ensure 'Enforce SSL connection' is set to 'ENABLED' for PostgreSQL Database Server                                                                                                                       | arm            |
+| 211 | CKV_AZURE_30 | resource          | azurerm_postgresql_configuration                                             | Ensure server parameter 'log_checkpoints' is set to 'ON' for PostgreSQL Database Server                                                                                                                  | Terraform      |
+| 212 | CKV_AZURE_30 | resource          | Microsoft.DBforPostgreSQL/servers/configurations                             | Ensure server parameter 'log_checkpoints' is set to 'ON' for PostgreSQL Database Server                                                                                                                  | arm            |
+| 213 | CKV_AZURE_30 | resource          | configurations                                                               | Ensure server parameter 'log_checkpoints' is set to 'ON' for PostgreSQL Database Server                                                                                                                  | arm            |
+| 214 | CKV_AZURE_31 | resource          | azurerm_postgresql_configuration                                             | Ensure server parameter 'log_connections' is set to 'ON' for PostgreSQL Database Server                                                                                                                  | Terraform      |
+| 215 | CKV_AZURE_31 | resource          | Microsoft.DBforPostgreSQL/servers/configurations                             | Ensure configuration 'log_connections' is set to 'ON' for PostgreSQL Database Server                                                                                                                     | arm            |
+| 216 | CKV_AZURE_31 | resource          | configurations                                                               | Ensure configuration 'log_connections' is set to 'ON' for PostgreSQL Database Server                                                                                                                     | arm            |
+| 217 | CKV_AZURE_32 | resource          | azurerm_postgresql_configuration                                             | Ensure server parameter 'connection_throttling' is set to 'ON' for PostgreSQL Database Server                                                                                                            | Terraform      |
+| 218 | CKV_AZURE_32 | resource          | Microsoft.DBforPostgreSQL/servers/configurations                             | Ensure server parameter 'connection_throttling' is set to 'ON' for PostgreSQL Database Server                                                                                                            | arm            |
+| 219 | CKV_AZURE_32 | resource          | configurations                                                               | Ensure server parameter 'connection_throttling' is set to 'ON' for PostgreSQL Database Server                                                                                                            | arm            |
+| 220 | CKV_AZURE_33 | resource          | azurerm_storage_account                                                      | Ensure Storage logging is enabled for Queue service for read, write and delete requests                                                                                                                  | Terraform      |
+| 221 | CKV_AZURE_33 | resource          | Microsoft.Storage/storageAccounts/queueServices/providers/diagnosticsettings | Ensure Storage logging is enabled for Queue service for read, write and delete requests                                                                                                                  | arm            |
+| 222 | CKV_AZURE_34 | resource          | azurerm_storage_container                                                    | Ensure that 'Public access level' is set to Private for blob containers                                                                                                                                  | Terraform      |
+| 223 | CKV_AZURE_34 | resource          | Microsoft.Storage/storageAccounts/blobServices/containers                    | Ensure that 'Public access level' is set to Private for blob containers                                                                                                                                  | arm            |
+| 224 | CKV_AZURE_34 | resource          | containers                                                                   | Ensure that 'Public access level' is set to Private for blob containers                                                                                                                                  | arm            |
+| 225 | CKV_AZURE_34 | resource          | blobServices/containers                                                      | Ensure that 'Public access level' is set to Private for blob containers                                                                                                                                  | arm            |
+| 226 | CKV_AZURE_35 | resource          | azurerm_storage_account                                                      | Ensure default network access rule for Storage Accounts is set to deny                                                                                                                                   | Terraform      |
+| 227 | CKV_AZURE_35 | resource          | azurerm_storage_account_network_rules                                        | Ensure default network access rule for Storage Accounts is set to deny                                                                                                                                   | Terraform      |
+| 228 | CKV_AZURE_35 | resource          | Microsoft.Storage/storageAccounts                                            | Ensure default network access rule for Storage Accounts is set to deny                                                                                                                                   | arm            |
+| 229 | CKV_AZURE_36 | resource          | azurerm_storage_account                                                      | Ensure 'Trusted Microsoft Services' is enabled for Storage Account access                                                                                                                                | Terraform      |
+| 230 | CKV_AZURE_36 | resource          | azurerm_storage_account_network_rules                                        | Ensure 'Trusted Microsoft Services' is enabled for Storage Account access                                                                                                                                | Terraform      |
+| 231 | CKV_AZURE_36 | resource          | Microsoft.Storage/storageAccounts                                            | Ensure 'Trusted Microsoft Services' is enabled for Storage Account access                                                                                                                                | arm            |
+| 232 | CKV_AZURE_37 | resource          | azurerm_monitor_log_profile                                                  | Ensure that Activity Log Retention is set 365 days or greater                                                                                                                                            | Terraform      |
+| 233 | CKV_AZURE_37 | resource          | microsoft.insights/logprofiles                                               | Ensure that Activity Log Retention is set 365 days or greater                                                                                                                                            | arm            |
+| 234 | CKV_AZURE_38 | resource          | azurerm_monitor_log_profile                                                  | Ensure audit profile captures all the activities                                                                                                                                                         | Terraform      |
+| 235 | CKV_AZURE_38 | resource          | microsoft.insights/logprofiles                                               | Ensure audit profile captures all the activities                                                                                                                                                         | arm            |
+| 236 | CKV_AZURE_39 | resource          | azurerm_role_definition                                                      | Ensure that no custom subscription owner roles are created                                                                                                                                               | Terraform      |
+| 237 | CKV_AZURE_39 | resource          | Microsoft.Authorization/roleDefinitions                                      | Ensure that no custom subscription owner roles are created                                                                                                                                               | arm            |
+| 238 | CKV_AZURE_40 | resource          | azurerm_key_vault_key                                                        | Ensure that the expiration date is set on all keys                                                                                                                                                       | Terraform      |
+| 239 | CKV_AZURE_41 | resource          | azurerm_key_vault_secret                                                     | Ensure that the expiration date is set on all secrets                                                                                                                                                    | Terraform      |
+| 240 | CKV_AZURE_41 | resource          | Microsoft.KeyVault/vaults/secrets                                            | Ensure that the expiration date is set on all secrets                                                                                                                                                    | arm            |
+| 241 | CKV_AZURE_42 | resource          | azurerm_key_vault                                                            | Ensure the key vault is recoverable                                                                                                                                                                      | Terraform      |
+| 242 | CKV_AZURE_42 | resource          | Microsoft.KeyVault/vaults                                                    | Ensure the key vault is recoverable                                                                                                                                                                      | arm            |
+| 243 | CKV_AZURE_44 | resource          | azurerm_storage_account                                                      | Ensure Storage Account is using the latest version of TLS encryption                                                                                                                                     | Terraform      |
+| 244 | CKV_GCP_1    | resource          | google_container_cluster                                                     | Ensure Stackdriver Logging is set to Enabled on Kubernetes Engine Clusters                                                                                                                               | Terraform      |
+| 245 | CKV_GCP_2    | resource          | google_compute_firewall                                                      | Ensure Google compute firewall ingress does not allow unrestricted ssh access                                                                                                                            | Terraform      |
+| 246 | CKV_GCP_3    | resource          | google_compute_firewall                                                      | Ensure Google compute firewall ingress does not allow unrestricted rdp access                                                                                                                            | Terraform      |
+| 247 | CKV_GCP_4    | resource          | google_compute_ssl_policy                                                    | Ensure no HTTPS or SSL proxy load balancers permit SSL policies with weak cipher suites                                                                                                                  | Terraform      |
+| 248 | CKV_GCP_5    | resource          | google_storage_bucket                                                        | Ensure Google storage bucket have encryption enabled                                                                                                                                                     | Terraform      |
+| 249 | CKV_GCP_6    | resource          | google_sql_database_instance                                                 | Ensure all Cloud SQL database instance requires all incoming connections to use SSL                                                                                                                      | Terraform      |
+| 250 | CKV_GCP_7    | resource          | google_container_cluster                                                     | Ensure Legacy Authorization is set to Disabled on Kubernetes Engine Clusters                                                                                                                             | Terraform      |
+| 251 | CKV_GCP_8    | resource          | google_container_cluster                                                     | Ensure Stackdriver Monitoring is set to Enabled on Kubernetes Engine Clusters                                                                                                                            | Terraform      |
+| 252 | CKV_GCP_9    | resource          | google_container_node_pool                                                   | Ensure 'Automatic node repair' is enabled for Kubernetes Clusters                                                                                                                                        | Terraform      |
+| 253 | CKV_GCP_10   | resource          | google_container_node_pool                                                   | Ensure 'Automatic node upgrade' is enabled for Kubernetes Clusters                                                                                                                                       | Terraform      |
+| 254 | CKV_GCP_11   | resource          | google_sql_database_instance                                                 | Ensure that Cloud SQL database Instances are not open to the world                                                                                                                                       | Terraform      |
+| 255 | CKV_GCP_12   | resource          | google_container_cluster                                                     | Ensure Network Policy is enabled on Kubernetes Engine Clusters                                                                                                                                           | Terraform      |
+| 256 | CKV_GCP_13   | resource          | google_container_cluster                                                     | Ensure a client certificate is used by clients to authenticate to Kubernetes Engine Clusters                                                                                                             | Terraform      |
+| 257 | CKV_GCP_14   | resource          | google_sql_database_instance                                                 | Ensure all Cloud SQL database instance have backup configuration enabled                                                                                                                                 | Terraform      |
+| 258 | CKV_GCP_15   | resource          | google_bigquery_dataset                                                      | Ensure that BigQuery datasets are not anonymously or publicly accessible                                                                                                                                 | Terraform      |
+| 259 | CKV_GCP_16   | resource          | google_dns_managed_zone                                                      | Ensure that DNSSEC is enabled for Cloud DNS                                                                                                                                                              | Terraform      |
+| 260 | CKV_GCP_17   | resource          | google_dns_managed_zone                                                      | Ensure that RSASHA1 is not used for the zone-signing and key-signing keys in Cloud DNS DNSSEC                                                                                                            | Terraform      |
+| 261 | CKV_GCP_18   | resource          | google_container_cluster                                                     | Ensure GKE Control Plane is not public                                                                                                                                                                   | Terraform      |
+| 262 | CKV_GCP_19   | resource          | google_container_cluster                                                     | Ensure GKE basic auth is disabled                                                                                                                                                                        | Terraform      |
+| 263 | CKV_GCP_20   | resource          | google_container_cluster                                                     | Ensure master authorized networks is set to enabled in GKE clusters                                                                                                                                      | Terraform      |
+| 264 | CKV_GCP_21   | resource          | google_container_cluster                                                     | Ensure Kubernetes Clusters are configured with Labels                                                                                                                                                    | Terraform      |
+| 265 | CKV_GCP_22   | resource          | google_container_node_pool                                                   | Ensure Container-Optimized OS (cos) is used for Kubernetes Engine Clusters Node image                                                                                                                    | Terraform      |
+| 266 | CKV_GCP_23   | resource          | google_container_cluster                                                     | Ensure Kubernetes Cluster is created with Alias IP ranges enabled                                                                                                                                        | Terraform      |
+| 267 | CKV_GCP_24   | resource          | google_container_cluster                                                     | Ensure PodSecurityPolicy controller is enabled on the Kubernetes Engine Clusters                                                                                                                         | Terraform      |
+| 268 | CKV_GCP_25   | resource          | google_container_cluster                                                     | Ensure Kubernetes Cluster is created with Private cluster enabled                                                                                                                                        | Terraform      |
+| 269 | CKV_GCP_26   | resource          | google_compute_subnetwork                                                    | Ensure that VPC Flow Logs is enabled for every subnet in a VPC Network                                                                                                                                   | Terraform      |
+| 270 | CKV_GCP_27   | resource          | google_project                                                               | Ensure that the default network does not exist in a project                                                                                                                                              | Terraform      |
+| 271 | CKV_GCP_28   | resource          | google_storage_bucket_iam_member                                             | Ensure that Cloud Storage bucket is not anonymously or publicly accessible                                                                                                                               | Terraform      |
+| 272 | CKV_GCP_28   | resource          | google_storage_bucket_iam_binding                                            | Ensure that Cloud Storage bucket is not anonymously or publicly accessible                                                                                                                               | Terraform      |
+| 273 | CKV_GCP_29   | resource          | google_storage_bucket                                                        | Ensure that Cloud Storage buckets have uniform bucket-level access enabled                                                                                                                               | Terraform      |
+| 274 | CKV_GCP_30   | resource          | google_compute_instance                                                      | Ensure that instances are not configured to use the default service account                                                                                                                              | Terraform      |
+| 275 | CKV_GCP_31   | resource          | google_compute_instance                                                      | Ensure that instances are not configured to use the default service account with full access to all Cloud APIs                                                                                           | Terraform      |
+| 276 | CKV_GCP_32   | resource          | google_compute_instance                                                      | Ensure 'Block Project-wide SSH keys' is enabled for VM instances                                                                                                                                         | Terraform      |
+| 277 | CKV_GCP_33   | resource          | google_compute_project_metadata                                              | Ensure oslogin is enabled for a Project                                                                                                                                                                  | Terraform      |
+| 278 | CKV_GCP_34   | resource          | google_compute_instance                                                      | Ensure that no instance in the project overrides the project setting for enabling OSLogin(OSLogin needs to be enabled in prject metadata for all instances)                                              | Terraform      |
+| 279 | CKV_GCP_35   | resource          | google_compute_instance                                                      | Ensure 'Enable connecting to serial ports' is not enabled for VM Instance                                                                                                                                | Terraform      |
+| 280 | CKV_GCP_36   | resource          | google_compute_instance                                                      | Ensure that IP forwarding is not enabled on Instances                                                                                                                                                    | Terraform      |
+| 281 | CKV_GCP_37   | resource          | google_compute_disk                                                          | Ensure VM disks for critical VMs are encrypted with Customer Supplied Encryption Keys (CSEK)                                                                                                             | Terraform      |
+| 282 | CKV_GCP_38   | resource          | google_compute_instance                                                      | Ensure VM disks for critical VMs are encrypted with Customer Supplied Encryption Keys (CSEK)                                                                                                             | Terraform      |
+| 283 | CKV_GCP_39   | resource          | google_compute_instance                                                      | Ensure Compute instances are launched with Shielded VM enabled                                                                                                                                           | Terraform      |
+| 284 | CKV_GCP_40   | resource          | google_compute_instance                                                      | Ensure that Compute instances do not have public IP addresses                                                                                                                                            | Terraform      |
+| 285 | CKV_GCP_41   | resource          | google_project_iam_member                                                    | Ensure that IAM users are not assigned the Service Account User or Service Account Token Creator roles at project level                                                                                  | Terraform      |
+| 286 | CKV_GCP_41   | resource          | google_project_iam_binding                                                   | Ensure that IAM users are not assigned the Service Account User or Service Account Token Creator roles at project level                                                                                  | Terraform      |
+| 287 | CKV_GCP_42   | resource          | google_project_iam_member                                                    | Ensure that Service Account has no Admin privileges                                                                                                                                                      | Terraform      |
+| 288 | CKV_GCP_43   | resource          | google_kms_crypto_key                                                        | Ensure KMS encryption keys are rotated within a period of 90 days                                                                                                                                        | Terraform      |
+| 289 | CKV_GCP_44   | resource          | google_folder_iam_member                                                     | Ensure no roles that enable to impersonate and manage all service accounts are used at a folder level                                                                                                    | Terraform      |
+| 290 | CKV_GCP_44   | resource          | google_folder_iam_binding                                                    | Ensure no roles that enable to impersonate and manage all service accounts are used at a folder level                                                                                                    | Terraform      |
+| 291 | CKV_GCP_45   | resource          | google_organization_iam_member                                               | Ensure no roles that enable to impersonate and manage all service accounts are used at an organization level                                                                                             | Terraform      |
+| 292 | CKV_GCP_45   | resource          | google_organization_iam_binding                                              | Ensure no roles that enable to impersonate and manage all service accounts are used at an organization level                                                                                             | Terraform      |
+| 293 | CKV_GCP_46   | resource          | google_project_iam_member                                                    | Ensure Default Service account is not used at a project level                                                                                                                                            | Terraform      |
+| 294 | CKV_GCP_46   | resource          | google_project_iam_binding                                                   | Ensure Default Service account is not used at a project level                                                                                                                                            | Terraform      |
+| 295 | CKV_GCP_47   | resource          | google_organization_iam_member                                               | Ensure default service account is not used at an organization level                                                                                                                                      | Terraform      |
+| 296 | CKV_GCP_47   | resource          | google_organization_iam_binding                                              | Ensure default service account is not used at an organization level                                                                                                                                      | Terraform      |
+| 297 | CKV_GCP_48   | resource          | google_folder_iam_member                                                     | Ensure Default Service account is not used at a folder level                                                                                                                                             | Terraform      |
+| 298 | CKV_GCP_48   | resource          | google_folder_iam_binding                                                    | Ensure Default Service account is not used at a folder level                                                                                                                                             | Terraform      |
+| 299 | CKV_GCP_49   | resource          | google_project_iam_member                                                    | Ensure no roles that enable to impersonate and manage all service accounts are used at a project level                                                                                                   | Terraform      |
+| 300 | CKV_GCP_49   | resource          | google_project_iam_binding                                                   | Ensure no roles that enable to impersonate and manage all service accounts are used at a project level                                                                                                   | Terraform      |
+| 301 | CKV_GIT_1    | resource          | github_repository                                                            | Ensure Repository is Private                                                                                                                                                                             | Terraform      |
+| 302 | CKV_K8S_1    | PodSecurityPolicy | PodSecurityPolicy                                                            | Do not admit containers wishing to share the host process ID namespace                                                                                                                                   | Kubernetes     |
+| 303 | CKV_K8S_2    | PodSecurityPolicy | PodSecurityPolicy                                                            | Do not admit privileged containers                                                                                                                                                                       | Kubernetes     |
+| 304 | CKV_K8S_3    | PodSecurityPolicy | PodSecurityPolicy                                                            | Do not admit containers wishing to share the host IPC namespace                                                                                                                                          | Kubernetes     |
+| 305 | CKV_K8S_4    | PodSecurityPolicy | PodSecurityPolicy                                                            | Do not admit containers wishing to share the host network namespace                                                                                                                                      | Kubernetes     |
+| 306 | CKV_K8S_5    | PodSecurityPolicy | PodSecurityPolicy                                                            | Containers should not run with allowPrivilegeEscalation                                                                                                                                                  | Kubernetes     |
+| 307 | CKV_K8S_6    | PodSecurityPolicy | PodSecurityPolicy                                                            | Do not admit root containers                                                                                                                                                                             | Kubernetes     |
+| 308 | CKV_K8S_7    | PodSecurityPolicy | PodSecurityPolicy                                                            | Do not admit containers with the NET_RAW capability                                                                                                                                                      | Kubernetes     |
+| 309 | CKV_K8S_8    | PodSecurityPolicy | containers                                                                   | Liveness Probe Should be Configured                                                                                                                                                                      | Kubernetes     |
+| 310 | CKV_K8S_9    | PodSecurityPolicy | containers                                                                   | Readiness Probe Should be Configured                                                                                                                                                                     | Kubernetes     |
+| 311 | CKV_K8S_10   | PodSecurityPolicy | containers                                                                   | CPU requests should be set                                                                                                                                                                               | Kubernetes     |
+| 312 | CKV_K8S_10   | PodSecurityPolicy | initContainers                                                               | CPU requests should be set                                                                                                                                                                               | Kubernetes     |
+| 313 | CKV_K8S_11   | PodSecurityPolicy | containers                                                                   | CPU limits should be set                                                                                                                                                                                 | Kubernetes     |
+| 314 | CKV_K8S_11   | PodSecurityPolicy | initContainers                                                               | CPU limits should be set                                                                                                                                                                                 | Kubernetes     |
+| 315 | CKV_K8S_12   | PodSecurityPolicy | containers                                                                   | Memory requests should be set                                                                                                                                                                            | Kubernetes     |
+| 316 | CKV_K8S_12   | PodSecurityPolicy | initContainers                                                               | Memory requests should be set                                                                                                                                                                            | Kubernetes     |
+| 317 | CKV_K8S_13   | PodSecurityPolicy | containers                                                                   | Memory limits should be set                                                                                                                                                                              | Kubernetes     |
+| 318 | CKV_K8S_13   | PodSecurityPolicy | initContainers                                                               | Memory limits should be set                                                                                                                                                                              | Kubernetes     |
+| 319 | CKV_K8S_14   | PodSecurityPolicy | containers                                                                   | Image Tag should be fixed - not latest or blank                                                                                                                                                          | Kubernetes     |
+| 320 | CKV_K8S_14   | PodSecurityPolicy | initContainers                                                               | Image Tag should be fixed - not latest or blank                                                                                                                                                          | Kubernetes     |
+| 321 | CKV_K8S_15   | PodSecurityPolicy | containers                                                                   | Image Pull Policy should be Always                                                                                                                                                                       | Kubernetes     |
+| 322 | CKV_K8S_15   | PodSecurityPolicy | initContainers                                                               | Image Pull Policy should be Always                                                                                                                                                                       | Kubernetes     |
+| 323 | CKV_K8S_16   | PodSecurityPolicy | containers                                                                   | Container should not be privileged                                                                                                                                                                       | Kubernetes     |
+| 324 | CKV_K8S_16   | PodSecurityPolicy | initContainers                                                               | Container should not be privileged                                                                                                                                                                       | Kubernetes     |
+| 325 | CKV_K8S_17   | PodSecurityPolicy | Pod                                                                          | Containers should not share the host process ID namespace                                                                                                                                                | Kubernetes     |
+| 326 | CKV_K8S_17   | PodSecurityPolicy | Deployment                                                                   | Containers should not share the host process ID namespace                                                                                                                                                | Kubernetes     |
+| 327 | CKV_K8S_17   | PodSecurityPolicy | DaemonSet                                                                    | Containers should not share the host process ID namespace                                                                                                                                                | Kubernetes     |
+| 328 | CKV_K8S_17   | PodSecurityPolicy | StatefulSet                                                                  | Containers should not share the host process ID namespace                                                                                                                                                | Kubernetes     |
+| 329 | CKV_K8S_17   | PodSecurityPolicy | ReplicaSet                                                                   | Containers should not share the host process ID namespace                                                                                                                                                | Kubernetes     |
+| 330 | CKV_K8S_17   | PodSecurityPolicy | ReplicationController                                                        | Containers should not share the host process ID namespace                                                                                                                                                | Kubernetes     |
+| 331 | CKV_K8S_17   | PodSecurityPolicy | Job                                                                          | Containers should not share the host process ID namespace                                                                                                                                                | Kubernetes     |
+| 332 | CKV_K8S_17   | PodSecurityPolicy | CronJob                                                                      | Containers should not share the host process ID namespace                                                                                                                                                | Kubernetes     |
+| 333 | CKV_K8S_18   | PodSecurityPolicy | Pod                                                                          | Containers should not share the host IPC namespace                                                                                                                                                       | Kubernetes     |
+| 334 | CKV_K8S_18   | PodSecurityPolicy | Deployment                                                                   | Containers should not share the host IPC namespace                                                                                                                                                       | Kubernetes     |
+| 335 | CKV_K8S_18   | PodSecurityPolicy | DaemonSet                                                                    | Containers should not share the host IPC namespace                                                                                                                                                       | Kubernetes     |
+| 336 | CKV_K8S_18   | PodSecurityPolicy | StatefulSet                                                                  | Containers should not share the host IPC namespace                                                                                                                                                       | Kubernetes     |
+| 337 | CKV_K8S_18   | PodSecurityPolicy | ReplicaSet                                                                   | Containers should not share the host IPC namespace                                                                                                                                                       | Kubernetes     |
+| 338 | CKV_K8S_18   | PodSecurityPolicy | ReplicationController                                                        | Containers should not share the host IPC namespace                                                                                                                                                       | Kubernetes     |
+| 339 | CKV_K8S_18   | PodSecurityPolicy | Job                                                                          | Containers should not share the host IPC namespace                                                                                                                                                       | Kubernetes     |
+| 340 | CKV_K8S_18   | PodSecurityPolicy | CronJob                                                                      | Containers should not share the host IPC namespace                                                                                                                                                       | Kubernetes     |
+| 341 | CKV_K8S_19   | PodSecurityPolicy | Pod                                                                          | Containers should not share the host network namespace                                                                                                                                                   | Kubernetes     |
+| 342 | CKV_K8S_19   | PodSecurityPolicy | Deployment                                                                   | Containers should not share the host network namespace                                                                                                                                                   | Kubernetes     |
+| 343 | CKV_K8S_19   | PodSecurityPolicy | DaemonSet                                                                    | Containers should not share the host network namespace                                                                                                                                                   | Kubernetes     |
+| 344 | CKV_K8S_19   | PodSecurityPolicy | StatefulSet                                                                  | Containers should not share the host network namespace                                                                                                                                                   | Kubernetes     |
+| 345 | CKV_K8S_19   | PodSecurityPolicy | ReplicaSet                                                                   | Containers should not share the host network namespace                                                                                                                                                   | Kubernetes     |
+| 346 | CKV_K8S_19   | PodSecurityPolicy | ReplicationController                                                        | Containers should not share the host network namespace                                                                                                                                                   | Kubernetes     |
+| 347 | CKV_K8S_19   | PodSecurityPolicy | Job                                                                          | Containers should not share the host network namespace                                                                                                                                                   | Kubernetes     |
+| 348 | CKV_K8S_19   | PodSecurityPolicy | CronJob                                                                      | Containers should not share the host network namespace                                                                                                                                                   | Kubernetes     |
+| 349 | CKV_K8S_20   | PodSecurityPolicy | containers                                                                   | Containers should not run with allowPrivilegeEscalation                                                                                                                                                  | Kubernetes     |
+| 350 | CKV_K8S_20   | PodSecurityPolicy | initContainers                                                               | Containers should not run with allowPrivilegeEscalation                                                                                                                                                  | Kubernetes     |
+| 351 | CKV_K8S_21   | PodSecurityPolicy | Pod                                                                          | The default namespace should not be used                                                                                                                                                                 | Kubernetes     |
+| 352 | CKV_K8S_21   | PodSecurityPolicy | Deployment                                                                   | The default namespace should not be used                                                                                                                                                                 | Kubernetes     |
+| 353 | CKV_K8S_21   | PodSecurityPolicy | DaemonSet                                                                    | The default namespace should not be used                                                                                                                                                                 | Kubernetes     |
+| 354 | CKV_K8S_21   | PodSecurityPolicy | StatefulSet                                                                  | The default namespace should not be used                                                                                                                                                                 | Kubernetes     |
+| 355 | CKV_K8S_21   | PodSecurityPolicy | ReplicaSet                                                                   | The default namespace should not be used                                                                                                                                                                 | Kubernetes     |
+| 356 | CKV_K8S_21   | PodSecurityPolicy | ReplicationController                                                        | The default namespace should not be used                                                                                                                                                                 | Kubernetes     |
+| 357 | CKV_K8S_21   | PodSecurityPolicy | Job                                                                          | The default namespace should not be used                                                                                                                                                                 | Kubernetes     |
+| 358 | CKV_K8S_21   | PodSecurityPolicy | CronJob                                                                      | The default namespace should not be used                                                                                                                                                                 | Kubernetes     |
+| 359 | CKV_K8S_21   | PodSecurityPolicy | Service                                                                      | The default namespace should not be used                                                                                                                                                                 | Kubernetes     |
+| 360 | CKV_K8S_21   | PodSecurityPolicy | Secret                                                                       | The default namespace should not be used                                                                                                                                                                 | Kubernetes     |
+| 361 | CKV_K8S_21   | PodSecurityPolicy | ServiceAccount                                                               | The default namespace should not be used                                                                                                                                                                 | Kubernetes     |
+| 362 | CKV_K8S_21   | PodSecurityPolicy | Role                                                                         | The default namespace should not be used                                                                                                                                                                 | Kubernetes     |
+| 363 | CKV_K8S_21   | PodSecurityPolicy | RoleBinding                                                                  | The default namespace should not be used                                                                                                                                                                 | Kubernetes     |
+| 364 | CKV_K8S_21   | PodSecurityPolicy | ConfigMap                                                                    | The default namespace should not be used                                                                                                                                                                 | Kubernetes     |
+| 365 | CKV_K8S_21   | PodSecurityPolicy | Ingress                                                                      | The default namespace should not be used                                                                                                                                                                 | Kubernetes     |
+| 366 | CKV_K8S_22   | PodSecurityPolicy | containers                                                                   | Use read-only filesystem for containers where possible                                                                                                                                                   | Kubernetes     |
+| 367 | CKV_K8S_22   | PodSecurityPolicy | initContainers                                                               | Use read-only filesystem for containers where possible                                                                                                                                                   | Kubernetes     |
+| 368 | CKV_K8S_23   | PodSecurityPolicy | Pod                                                                          | Minimize the admission of root containers                                                                                                                                                                | Kubernetes     |
+| 369 | CKV_K8S_23   | PodSecurityPolicy | Deployment                                                                   | Minimize the admission of root containers                                                                                                                                                                | Kubernetes     |
+| 370 | CKV_K8S_23   | PodSecurityPolicy | DaemonSet                                                                    | Minimize the admission of root containers                                                                                                                                                                | Kubernetes     |
+| 371 | CKV_K8S_23   | PodSecurityPolicy | StatefulSet                                                                  | Minimize the admission of root containers                                                                                                                                                                | Kubernetes     |
+| 372 | CKV_K8S_23   | PodSecurityPolicy | ReplicaSet                                                                   | Minimize the admission of root containers                                                                                                                                                                | Kubernetes     |
+| 373 | CKV_K8S_23   | PodSecurityPolicy | ReplicationController                                                        | Minimize the admission of root containers                                                                                                                                                                | Kubernetes     |
+| 374 | CKV_K8S_23   | PodSecurityPolicy | Job                                                                          | Minimize the admission of root containers                                                                                                                                                                | Kubernetes     |
+| 375 | CKV_K8S_23   | PodSecurityPolicy | CronJob                                                                      | Minimize the admission of root containers                                                                                                                                                                | Kubernetes     |
+| 376 | CKV_K8S_24   | PodSecurityPolicy | PodSecurityPolicy                                                            | Do not allow containers with added capability                                                                                                                                                            | Kubernetes     |
+| 377 | CKV_K8S_25   | PodSecurityPolicy | containers                                                                   | Minimize the admission of containers with added capability                                                                                                                                               | Kubernetes     |
+| 378 | CKV_K8S_25   | PodSecurityPolicy | initContainers                                                               | Minimize the admission of containers with added capability                                                                                                                                               | Kubernetes     |
+| 379 | CKV_K8S_26   | PodSecurityPolicy | containers                                                                   | Do not specify hostPort unless absolutely necessary                                                                                                                                                      | Kubernetes     |
+| 380 | CKV_K8S_26   | PodSecurityPolicy | initContainers                                                               | Do not specify hostPort unless absolutely necessary                                                                                                                                                      | Kubernetes     |
+| 381 | CKV_K8S_27   | PodSecurityPolicy | Pod                                                                          | Do not expose the docker daemon socket to containers                                                                                                                                                     | Kubernetes     |
+| 382 | CKV_K8S_27   | PodSecurityPolicy | Deployment                                                                   | Do not expose the docker daemon socket to containers                                                                                                                                                     | Kubernetes     |
+| 383 | CKV_K8S_27   | PodSecurityPolicy | DaemonSet                                                                    | Do not expose the docker daemon socket to containers                                                                                                                                                     | Kubernetes     |
+| 384 | CKV_K8S_27   | PodSecurityPolicy | StatefulSet                                                                  | Do not expose the docker daemon socket to containers                                                                                                                                                     | Kubernetes     |
+| 385 | CKV_K8S_27   | PodSecurityPolicy | ReplicaSet                                                                   | Do not expose the docker daemon socket to containers                                                                                                                                                     | Kubernetes     |
+| 386 | CKV_K8S_27   | PodSecurityPolicy | ReplicationController                                                        | Do not expose the docker daemon socket to containers                                                                                                                                                     | Kubernetes     |
+| 387 | CKV_K8S_27   | PodSecurityPolicy | Job                                                                          | Do not expose the docker daemon socket to containers                                                                                                                                                     | Kubernetes     |
+| 388 | CKV_K8S_27   | PodSecurityPolicy | CronJob                                                                      | Do not expose the docker daemon socket to containers                                                                                                                                                     | Kubernetes     |
+| 389 | CKV_K8S_28   | PodSecurityPolicy | containers                                                                   | Minimize the admission of containers with the NET_RAW capability                                                                                                                                         | Kubernetes     |
+| 390 | CKV_K8S_28   | PodSecurityPolicy | initContainers                                                               | Minimize the admission of containers with the NET_RAW capability                                                                                                                                         | Kubernetes     |
+| 391 | CKV_K8S_29   | PodSecurityPolicy | Pod                                                                          | Apply security context to your pods and containers                                                                                                                                                       | Kubernetes     |
+| 392 | CKV_K8S_29   | PodSecurityPolicy | Deployment                                                                   | Apply security context to your pods and containers                                                                                                                                                       | Kubernetes     |
+| 393 | CKV_K8S_29   | PodSecurityPolicy | DaemonSet                                                                    | Apply security context to your pods and containers                                                                                                                                                       | Kubernetes     |
+| 394 | CKV_K8S_29   | PodSecurityPolicy | StatefulSet                                                                  | Apply security context to your pods and containers                                                                                                                                                       | Kubernetes     |
+| 395 | CKV_K8S_29   | PodSecurityPolicy | ReplicaSet                                                                   | Apply security context to your pods and containers                                                                                                                                                       | Kubernetes     |
+| 396 | CKV_K8S_29   | PodSecurityPolicy | ReplicationController                                                        | Apply security context to your pods and containers                                                                                                                                                       | Kubernetes     |
+| 397 | CKV_K8S_29   | PodSecurityPolicy | Job                                                                          | Apply security context to your pods and containers                                                                                                                                                       | Kubernetes     |
+| 398 | CKV_K8S_29   | PodSecurityPolicy | CronJob                                                                      | Apply security context to your pods and containers                                                                                                                                                       | Kubernetes     |
+| 399 | CKV_K8S_30   | PodSecurityPolicy | containers                                                                   | Apply security context to your pods and containers                                                                                                                                                       | Kubernetes     |
+| 400 | CKV_K8S_30   | PodSecurityPolicy | initContainers                                                               | Apply security context to your pods and containers                                                                                                                                                       | Kubernetes     |
+| 401 | CKV_K8S_31   | PodSecurityPolicy | Pod                                                                          | Ensure that the seccomp profile is set to docker/default or runtime/default                                                                                                                              | Kubernetes     |
+| 402 | CKV_K8S_31   | PodSecurityPolicy | Deployment                                                                   | Ensure that the seccomp profile is set to docker/default or runtime/default                                                                                                                              | Kubernetes     |
+| 403 | CKV_K8S_31   | PodSecurityPolicy | DaemonSet                                                                    | Ensure that the seccomp profile is set to docker/default or runtime/default                                                                                                                              | Kubernetes     |
+| 404 | CKV_K8S_31   | PodSecurityPolicy | StatefulSet                                                                  | Ensure that the seccomp profile is set to docker/default or runtime/default                                                                                                                              | Kubernetes     |
+| 405 | CKV_K8S_31   | PodSecurityPolicy | ReplicaSet                                                                   | Ensure that the seccomp profile is set to docker/default or runtime/default                                                                                                                              | Kubernetes     |
+| 406 | CKV_K8S_31   | PodSecurityPolicy | ReplicationController                                                        | Ensure that the seccomp profile is set to docker/default or runtime/default                                                                                                                              | Kubernetes     |
+| 407 | CKV_K8S_31   | PodSecurityPolicy | Job                                                                          | Ensure that the seccomp profile is set to docker/default or runtime/default                                                                                                                              | Kubernetes     |
+| 408 | CKV_K8S_31   | PodSecurityPolicy | CronJob                                                                      | Ensure that the seccomp profile is set to docker/default or runtime/default                                                                                                                              | Kubernetes     |
+| 409 | CKV_K8S_32   | PodSecurityPolicy | PodSecurityPolicy                                                            | Ensure default seccomp profile set to docker/default or runtime/default                                                                                                                                  | Kubernetes     |
+| 410 | CKV_K8S_33   | PodSecurityPolicy | containers                                                                   | Ensure the Kubernetes dashboard is not deployed                                                                                                                                                          | Kubernetes     |
+| 411 | CKV_K8S_33   | PodSecurityPolicy | initContainers                                                               | Ensure the Kubernetes dashboard is not deployed                                                                                                                                                          | Kubernetes     |
+| 412 | CKV_K8S_34   | PodSecurityPolicy | containers                                                                   | Ensure that Tiller (Helm v2) is not deployed                                                                                                                                                             | Kubernetes     |
+| 413 | CKV_K8S_34   | PodSecurityPolicy | initContainers                                                               | Ensure that Tiller (Helm v2) is not deployed                                                                                                                                                             | Kubernetes     |
+| 414 | CKV_K8S_35   | PodSecurityPolicy | containers                                                                   | Prefer using secrets as files over secrets as environment variables                                                                                                                                      | Kubernetes     |
+| 415 | CKV_K8S_35   | PodSecurityPolicy | initContainers                                                               | Prefer using secrets as files over secrets as environment variables                                                                                                                                      | Kubernetes     |
+| 416 | CKV_K8S_36   | PodSecurityPolicy | PodSecurityPolicy                                                            | Minimize the admission of containers with capabilities assigned                                                                                                                                          | Kubernetes     |
+| 417 | CKV_K8S_37   | PodSecurityPolicy | containers                                                                   | Minimize the admission of containers with capabilities assigned                                                                                                                                          | Kubernetes     |
+| 418 | CKV_K8S_37   | PodSecurityPolicy | initContainers                                                               | Minimize the admission of containers with capabilities assigned                                                                                                                                          | Kubernetes     |
+| 419 | CKV_K8S_38   | PodSecurityPolicy | Pod                                                                          | Ensure that Service Account Tokens are only mounted where necessary                                                                                                                                      | Kubernetes     |
+| 420 | CKV_K8S_38   | PodSecurityPolicy | Deployment                                                                   | Ensure that Service Account Tokens are only mounted where necessary                                                                                                                                      | Kubernetes     |
+| 421 | CKV_K8S_38   | PodSecurityPolicy | DaemonSet                                                                    | Ensure that Service Account Tokens are only mounted where necessary                                                                                                                                      | Kubernetes     |
+| 422 | CKV_K8S_38   | PodSecurityPolicy | StatefulSet                                                                  | Ensure that Service Account Tokens are only mounted where necessary                                                                                                                                      | Kubernetes     |
+| 423 | CKV_K8S_38   | PodSecurityPolicy | ReplicaSet                                                                   | Ensure that Service Account Tokens are only mounted where necessary                                                                                                                                      | Kubernetes     |
+| 424 | CKV_K8S_38   | PodSecurityPolicy | ReplicationController                                                        | Ensure that Service Account Tokens are only mounted where necessary                                                                                                                                      | Kubernetes     |
+| 425 | CKV_K8S_38   | PodSecurityPolicy | Job                                                                          | Ensure that Service Account Tokens are only mounted where necessary                                                                                                                                      | Kubernetes     |
+| 426 | CKV_K8S_38   | PodSecurityPolicy | CronJob                                                                      | Ensure that Service Account Tokens are only mounted where necessary                                                                                                                                      | Kubernetes     |
+| 427 | CKV_K8S_39   | PodSecurityPolicy | containers                                                                   | Do not use the CAP_SYS_ADMIN linux capability                                                                                                                                                            | Kubernetes     |
+| 428 | CKV_K8S_39   | PodSecurityPolicy | initContainers                                                               | Do not use the CAP_SYS_ADMIN linux capability                                                                                                                                                            | Kubernetes     |
+| 429 | CKV_K8S_40   | PodSecurityPolicy | Pod                                                                          | Containers should run as a high UID to avoid host conflict                                                                                                                                               | Kubernetes     |
+| 430 | CKV_K8S_40   | PodSecurityPolicy | Deployment                                                                   | Containers should run as a high UID to avoid host conflict                                                                                                                                               | Kubernetes     |
+| 431 | CKV_K8S_40   | PodSecurityPolicy | DaemonSet                                                                    | Containers should run as a high UID to avoid host conflict                                                                                                                                               | Kubernetes     |
+| 432 | CKV_K8S_40   | PodSecurityPolicy | StatefulSet                                                                  | Containers should run as a high UID to avoid host conflict                                                                                                                                               | Kubernetes     |
+| 433 | CKV_K8S_40   | PodSecurityPolicy | ReplicaSet                                                                   | Containers should run as a high UID to avoid host conflict                                                                                                                                               | Kubernetes     |
+| 434 | CKV_K8S_40   | PodSecurityPolicy | ReplicationController                                                        | Containers should run as a high UID to avoid host conflict                                                                                                                                               | Kubernetes     |
+| 435 | CKV_K8S_40   | PodSecurityPolicy | Job                                                                          | Containers should run as a high UID to avoid host conflict                                                                                                                                               | Kubernetes     |
+| 436 | CKV_K8S_40   | PodSecurityPolicy | CronJob                                                                      | Containers should run as a high UID to avoid host conflict                                                                                                                                               | Kubernetes     |
+| 437 | CKV_K8S_41   | PodSecurityPolicy | ServiceAccount                                                               | Ensure that default service accounts are not actively used                                                                                                                                               | Kubernetes     |
+| 438 | CKV_K8S_42   | PodSecurityPolicy | RoleBinding                                                                  | Ensure that default service accounts are not actively used                                                                                                                                               | Kubernetes     |
+| 439 | CKV_K8S_42   | PodSecurityPolicy | ClusterRoleBinding                                                           | Ensure that default service accounts are not actively used                                                                                                                                               | Kubernetes     |
+| 440 | CKV_K8S_43   | PodSecurityPolicy | containers                                                                   | Image should use digest                                                                                                                                                                                  | Kubernetes     |
+| 441 | CKV_K8S_43   | PodSecurityPolicy | initContainers                                                               | Image should use digest                                                                                                                                                                                  | Kubernetes     |
+| 442 | CKV_K8S_44   | PodSecurityPolicy | Service                                                                      | Ensure that the Tiller Service (Helm v2) is deleted                                                                                                                                                      | Kubernetes     |
+| 443 | CKV_K8S_45   | PodSecurityPolicy | containers                                                                   | Ensure the Tiller Deployment (Helm V2) is not accessible from within the cluster                                                                                                                         | Kubernetes     |
+| 444 | CKV_K8S_45   | PodSecurityPolicy | initContainers                                                               | Ensure the Tiller Deployment (Helm V2) is not accessible from within the cluster                                                                                                                         | Kubernetes     |
 
 
 ---
diff --git a/kubernetes/requirements.txt b/kubernetes/requirements.txt
index d6ab64d05..334e9dc5f 100644
--- a/kubernetes/requirements.txt
+++ b/kubernetes/requirements.txt
@@ -1,1 +1,1 @@
-checkov==1.0.505
+checkov==1.0.506


Test patch:
diff --git a/tests/terraform/checks/resource/aws/test_APIGatewayXray.py b/tests/terraform/checks/resource/aws/test_APIGatewayXray.py
new file mode 100644
index 000000000..a255645b3
--- /dev/null
+++ b/tests/terraform/checks/resource/aws/test_APIGatewayXray.py
@@ -0,0 +1,22 @@
+import unittest
+
+from checkov.terraform.checks.resource.aws.APIGatewayXray import check
+from checkov.common.models.enums import CheckResult
+
+
+class TestAPIGatewayXray(unittest.TestCase):
+
+    def test_failure(self):
+        resource_conf = {"xray_tracing_enabled": [False]}
+        scan_result = check.scan_resource_conf(conf=resource_conf)
+        self.assertEqual(CheckResult.FAILED, scan_result)
+
+
+    def test_success(self):
+        resource_conf = {"xray_tracing_enabled": [True]}
+        scan_result = check.scan_resource_conf(conf=resource_conf)
+        self.assertEqual(CheckResult.PASSED, scan_result)
+
+
+if __name__ == '__main__':
+    unittest.main()
diff --git a/tests/terraform/checks/resource/aws/test_DocDBEncryption.py b/tests/terraform/checks/resource/aws/test_DocDBEncryption.py
new file mode 100644
index 000000000..79a994d4a
--- /dev/null
+++ b/tests/terraform/checks/resource/aws/test_DocDBEncryption.py
@@ -0,0 +1,24 @@
+import unittest
+
+from checkov.common.models.enums import CheckResult
+from checkov.terraform.checks.resource.aws.DocDBEncryption import check
+
+
+class TestDocDBEncryption(unittest.TestCase):
+
+    def test_failure(self):
+        resource_conf = {"cluster_identifier": "my-docdb-cluster",
+                         "storage_encrypted": False}
+        scan_result = check.scan_resource_conf(conf=resource_conf)
+        self.assertEqual(CheckResult.FAILED, scan_result)
+
+    def test_success(self):
+        resource_conf = {"cluster_identifier": "my-docdb-cluster",
+                         "storage_encrypted": True}
+
+        scan_result = check.scan_resource_conf(conf=resource_conf)
+        self.assertEqual(CheckResult.PASSED, scan_result)
+
+
+if __name__ == '__main__':
+    unittest.main()