From 5de5f590a755eda54000de7154369b8b9272d2da Mon Sep 17 00:00:00 2001 From: Jake H-P <72385707+jhpyke@users.noreply.github.com> Date: Thu, 28 Nov 2024 11:36:34 +0000 Subject: [PATCH] =?UTF-8?q?=F0=9F=90=9B=20=20Hotfix:=20Ensure=20Avature=20?= =?UTF-8?q?DBT=20tables=20are=20outputted=20to=20correct=20location=20(#61?= =?UTF-8?q?93)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit * fix: disable workgroup configuration enforcement in Athena workgroup * Adding additional skip to keep trivy happy * Don't try and be fancy * Satisfy the capricious gods Co-authored-by: Tom Webber <80110358+tom-webber@users.noreply.github.com> --------- Co-authored-by: Tom Webber <80110358+tom-webber@users.noreply.github.com> --- .../athena/athena-workgroups.tf | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/terraform/aws/analytical-platform-data-production/athena/athena-workgroups.tf b/terraform/aws/analytical-platform-data-production/athena/athena-workgroups.tf index 2c8b78618f..de8af6fc13 100644 --- a/terraform/aws/analytical-platform-data-production/athena/athena-workgroups.tf +++ b/terraform/aws/analytical-platform-data-production/athena/athena-workgroups.tf @@ -62,8 +62,10 @@ resource "aws_athena_workgroup" "airflow" { } #trivy:ignore:avd-aws-0006:Not encrypting the workgroup currently +#trivy:ignore:avd-aws-0007:Can't enforce output location due to DBT requirements resource "aws_athena_workgroup" "dbt" { #checkov:skip=CKV_AWS_159:Not encrypting the workgroup currently + #checkov:skip=CKV_AWS_82:Can't enforce output location due to DBT requirements for_each = local.dbt_athena_workgroups @@ -71,7 +73,7 @@ resource "aws_athena_workgroup" "dbt" { configuration { bytes_scanned_cutoff_per_query = 1099511627776000 - enforce_workgroup_configuration = true + enforce_workgroup_configuration = false engine_version { selected_engine_version = "Athena engine version 3" }