How to fix accurics.azure.EKM.20 about terrascan

[williepaul]

Hello @siwon, thanks for the bug report. I took a first look at the policy, and from what I can tell, it seems to be failing trying to link the azurerm_monitor_diagnostic_setting resource to the corresponding keyvault resource. Hence, it thinks no logging is set. I'll check with the policy folks tonight.

One change that made the match work (just based on what I saw in the policy):
target_resource_id = "azurerm_key_vault.main"

It could be a rendering issue as well; will investigate.

Thanks,
-Willie

[alex-3sr]

Hi,

Yes, I've same issue here, but as purposed we can't use target_resource_id = "azurerm_key_vault.main" cause it will failed Terraform deploy.

This issue is similar to #432 where ressource group lock is on separate TF ressource.

Regards
Alexandre