Rule ID,Resource ID,Compliance,Exception Reason,Rule Level,Rule Info "AwsSolutions-S1","TestStack/SyntheticTestArtifactsBucket/Resource","Suppressed","Dont need access logs for canary bucket","Error","The S3 Bucket has server access logs disabled." "AwsSolutions-S2","TestStack/SyntheticTestArtifactsBucket/Resource","Compliant","N/A","Error","The S3 Bucket does not have public access restricted and blocked." "AwsSolutions-S5","TestStack/SyntheticTestArtifactsBucket/Resource","Compliant","N/A","Error","The S3 static website bucket either has an open world bucket policy or does not use a CloudFront Origin Access Identity (OAI) in the bucket policy for limited getObject and/or putObject permissions." "AwsSolutions-S10","TestStack/SyntheticTestArtifactsBucket/Resource","Compliant","N/A","Error","The S3 Bucket or bucket policy does not require requests to use SSL." "AwsSolutions-S10","TestStack/SyntheticTestArtifactsBucket/Policy/Resource","Compliant","N/A","Error","The S3 Bucket or bucket policy does not require requests to use SSL." "AwsSolutions-IAM4","TestStack/SyntheticTest/ServiceRole/Resource","Compliant","N/A","Error","The IAM user, role, or group uses AWS managed policies." "AwsSolutions-IAM5","TestStack/SyntheticTest/ServiceRole/Resource","Suppressed","Allow resource:*","Error","The IAM entity contains wildcard permissions and does not have a cdk-nag rule suppression with evidence for those permission." "AwsSolutions-IAM5","TestStack/SyntheticTest/ServiceRole/Resource","Suppressed","Allow resource:*","Error","The IAM entity contains wildcard permissions and does not have a cdk-nag rule suppression with evidence for those permission." "AwsSolutions-IAM5","TestStack/SyntheticTest/ServiceRole/Resource","Suppressed","Allow resource:*","Error","The IAM entity contains wildcard permissions and does not have a cdk-nag rule suppression with evidence for those permission."