Bridgecrew has created this PR to tag your IaC to Cloud resources.

scenarios/cicd/terraform/apigateway.tf

@@ -1,6 +1,11 @@
 resource "aws_apigatewayv2_api" "apigw" {
   name          = local.api_gateway_name
   protocol_type = "HTTP"
+  tags = {
+    git_org   = "LironElbaz"
+    git_repo  = "cloudgoat"
+    yor_trace = "yor_trace"
+  }
 }
 
 resource "aws_apigatewayv2_integration" "lambda" {
@@ -39,4 +44,9 @@ resource "aws_apigatewayv2_stage" "prod" {
   api_id        = aws_apigatewayv2_api.apigw.id
   deployment_id = aws_apigatewayv2_deployment.example.id
   name          = "prod"
+  tags = {
+    git_org   = "LironElbaz"
+    git_repo  = "cloudgoat"
+    yor_trace = "yor_trace"
+  }
 }

scenarios/cicd/terraform/codebuild_build.tf

@@ -22,6 +22,11 @@ resource "aws_codebuild_project" "build-docker-image" {
     type     = "CODECOMMIT"
     location = aws_codecommit_repository.code.clone_url_http
   }
+  tags = {
+    git_org   = "LironElbaz"
+    git_repo  = "cloudgoat"
+    yor_trace = "yor_trace"
+  }
 }
 
 
@@ -42,6 +47,11 @@ resource "aws_iam_role" "build-docker-image" {
   ]
 }
 EOF
+  tags = {
+    git_org   = "LironElbaz"
+    git_repo  = "cloudgoat"
+    yor_trace = "yor_trace"
+  }
 }
 
 resource "aws_iam_role_policy" "build-docker-image" {

scenarios/cicd/terraform/codebuild_deploy.tf

@@ -27,6 +27,11 @@ resource "aws_codebuild_project" "deploy-lambda" {
     type      = "NO_SOURCE"
     buildspec = file("${path.module}/../assets/cd-pipeline/buildspec.yml")
   }
+  tags = {
+    git_org   = "LironElbaz"
+    git_repo  = "cloudgoat"
+    yor_trace = "yor_trace"
+  }
 }
 
 
@@ -47,6 +52,11 @@ resource "aws_iam_role" "deploy-lambda" {
   ]
 }
 EOF
+  tags = {
+    git_org   = "LironElbaz"
+    git_repo  = "cloudgoat"
+    yor_trace = "yor_trace"
+  }
 }
 
 resource "aws_iam_role_policy" "deploy-lambda" {

scenarios/cicd/terraform/codepipeline.tf

@@ -7,8 +7,13 @@ locals {
 
 resource "aws_s3_bucket" "codepipeline_bucket" {
   bucket        = "codepipeline-bucket-${local.bucket_suffix}"
-  acl           = "private" 
+  acl           = "private"
   force_destroy = true
+  tags = {
+    git_org   = "LironElbaz"
+    git_repo  = "cloudgoat"
+    yor_trace = "yor_trace"
+  }
 }
 
 resource "aws_iam_role" "codepipeline" {
@@ -28,6 +33,11 @@ resource "aws_iam_role" "codepipeline" {
   ]
 }
 EOF
+  tags = {
+    git_org   = "LironElbaz"
+    git_repo  = "cloudgoat"
+    yor_trace = "yor_trace"
+  }
 }
 
 resource "aws_iam_role_policy" "codepipeline" {
@@ -138,4 +148,9 @@ resource "aws_codepipeline" "codepipeline" {
       }
     }
   }
+  tags = {
+    git_org   = "LironElbaz"
+    git_repo  = "cloudgoat"
+    yor_trace = "yor_trace"
+  }
 }

scenarios/cicd/terraform/dev_machine.tf

@@ -16,6 +16,11 @@ data "aws_ami" "ubuntu" {
 resource "aws_network_interface" "dev" {
   subnet_id   = module.vpc.private_subnets[0]
   private_ips = ["10.0.1.10"]
+  tags = {
+    git_org   = "LironElbaz"
+    git_repo  = "cloudgoat"
+    yor_trace = "yor_trace"
+  }
 }
 resource "aws_iam_role" "dev-instance" {
   name = "dev-instance-role"
@@ -36,6 +41,11 @@ resource "aws_iam_role" "dev-instance" {
     ]
 }
 EOF
+  tags = {
+    git_org   = "LironElbaz"
+    git_repo  = "cloudgoat"
+    yor_trace = "yor_trace"
+  }
 }
 resource "aws_iam_role_policy_attachment" "dev-instance-policy" {
   role       = aws_iam_role.dev-instance.name
@@ -44,6 +54,11 @@ resource "aws_iam_role_policy_attachment" "dev-instance-policy" {
 resource "aws_iam_instance_profile" "dev" {
   name = "dev-instance-profile"
   role = aws_iam_role.dev-instance.name
+  tags = {
+    git_org   = "LironElbaz"
+    git_repo  = "cloudgoat"
+    yor_trace = "yor_trace"
+  }
 }
 resource "tls_private_key" "ssh_key" {
   algorithm = "RSA"
@@ -58,12 +73,20 @@ resource "aws_instance" "dev" {
   tags = {
     Name        = "dev-instance",
     Environment = "dev"
+    git_org     = "LironElbaz"
+    git_repo    = "cloudgoat"
+    yor_trace   = "yor_trace"
   }
 }
 
 # IAM user
 resource "aws_iam_user" "readonly_user" {
   name = local.repo_readonly_username
+  tags = {
+    git_org   = "LironElbaz"
+    git_repo  = "cloudgoat"
+    yor_trace = "yor_trace"
+  }
 }
 resource "aws_iam_user_ssh_key" "readonly_user" {
   username   = aws_iam_user.readonly_user.name

scenarios/cicd/terraform/initial_iam_user.tf

@@ -1,5 +1,10 @@
 resource "aws_iam_user" "initial" {
   name = local.initial_username
+  tags = {
+    git_org   = "LironElbaz"
+    git_repo  = "cloudgoat"
+    yor_trace = "yor_trace"
+  }
 }
 resource "aws_iam_user_policy" "initial" {
   name = "initial-policy"

scenarios/cicd/terraform/rw_iam_user.tf

@@ -1,5 +1,10 @@
 resource "aws_iam_user" "developer" {
   name = local.repo_readwrite_username
+  tags = {
+    git_org   = "LironElbaz"
+    git_repo  = "cloudgoat"
+    yor_trace = "yor_trace"
+  }
 }
 resource "aws_iam_user_policy" "developer" {
   name = "developer-policy"

scenarios/cicd/terraform/sdlc.tf

@@ -1,5 +1,10 @@
 resource "aws_codecommit_repository" "code" {
   repository_name = local.repository_name
+  tags = {
+    git_org   = "LironElbaz"
+    git_repo  = "cloudgoat"
+    yor_trace = "yor_trace"
+  }
 }
 
 locals {
@@ -22,11 +27,11 @@ resource "null_resource" "upload_files" {
     on_failure  = fail
     interpreter = ["bash", "-c"]
     environment = {
-      AWS_REGION = var.region,
+      AWS_REGION         = var.region,
       AWS_DEFAULT_REGION = var.region
     }
-    
-    command     = <<BASH
+
+    command = <<BASH
     set -e
     cat > "${local.src_path}/buildspec.old.yml" <<EOF
       ${local.vulnerable_file_content}
@@ -54,5 +59,10 @@ BASH
 resource "aws_ecr_repository" "app" {
   name                 = local.ecr_repository_name
   image_tag_mutability = "MUTABLE"
+  tags = {
+    git_org   = "LironElbaz"
+    git_repo  = "cloudgoat"
+    yor_trace = "yor_trace"
+  }
 }
 

scenarios/cicd/terraform/simulate_user_activity.tf

@@ -16,6 +16,11 @@ resource "aws_iam_role" "simulate-user-activity-scheduling" {
   ]
 }
 EOF
+  tags = {
+    git_org   = "LironElbaz"
+    git_repo  = "cloudgoat"
+    yor_trace = "yor_trace"
+  }
 }
 
 resource "aws_iam_role_policy" "simulate-user-activity-scheduling" {
@@ -41,6 +46,11 @@ resource "aws_cloudwatch_event_rule" "schedule" {
   name                = "simulated-user-activity"
   description         = "Simulate user activity on the API"
   schedule_expression = "rate(1 minute)"
+  tags = {
+    git_org   = "LironElbaz"
+    git_repo  = "cloudgoat"
+    yor_trace = "yor_trace"
+  }
 }
 resource "aws_cloudwatch_event_target" "codebuild" {
   target_id = "trigger-codebuild"
@@ -82,6 +92,11 @@ resource "aws_codebuild_project" "simulate-user-activity" {
     type      = "NO_SOURCE"
     buildspec = file("${path.module}/../assets/simulated-user-activity/buildspec.yml")
   }
+  tags = {
+    git_org   = "LironElbaz"
+    git_repo  = "cloudgoat"
+    yor_trace = "yor_trace"
+  }
 }
 
 
@@ -102,6 +117,11 @@ resource "aws_iam_role" "simulate-user-activity" {
   ]
 }
 EOF
+  tags = {
+    git_org   = "LironElbaz"
+    git_repo  = "cloudgoat"
+    yor_trace = "yor_trace"
+  }
 }
 resource "aws_iam_role_policy" "simulate-user-activity" {
   role = aws_iam_role.simulate-user-activity.name