feat(query): Added Oss Bucket Versioning Disabled for Terraform. Chec…

…kmarx#4919

assets/queries/terraform/alicloud/oss_bucket_versioning_disabled/metadata.json

@@ -0,0 +1,11 @@
+{
+    "id": "70919c0b-2548-4e6b-8d7a-3d84ab6dabba",
+    "queryName": "OSS Bucket Versioning Disabled",
+    "severity": "MEDIUM",
+    "category": "Backup",
+    "descriptionText": "OSS Bucket should have versioning enabled",
+    "descriptionUrl": "https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/resources/oss_bucket#versioning",
+    "platform": "Terraform",
+    "descriptionID": "749f1287",
+    "cloudProvider": "alicloud"
+  }

assets/queries/terraform/alicloud/oss_bucket_versioning_disabled/query.rego

@@ -0,0 +1,35 @@
+package Cx
+
+import data.generic.common as common_lib
+
+CxPolicy[result] {
+	some i
+	resource := input.document[i].resource.alicloud_oss_bucket[name]
+
+    resource.versioning.status == "Suspended"
+
+	result := {
+		"documentId": input.document[i].id,
+		"searchKey": sprintf("alicloud_oss_bucket[%s].versioning.status", [name]),
+		"issueType": "IncorrectValue",
+		"keyExpectedValue": "'versioning.status' is enabled",
+		"keyActualValue": "'versioning.status' is suspended",
+		"searchLine": common_lib.build_search_line(["resource", "alicloud_oss_bucket", name, "versioning", "status"], []),
+	}
+}
+
+CxPolicy[result] {
+	some i
+	resource := input.document[i].resource.alicloud_oss_bucket[name]
+
+    not common_lib.valid_key(resource, "versioning")
+
+	result := {
+		"documentId": input.document[i].id,
+		"searchKey": sprintf("alicloud_oss_bucket[%s]", [name]),
+		"issueType": "MissingAttribute",
+		"keyExpectedValue": "'versioning.status' is defined and set to enabled",
+		"keyActualValue": "'versioning' is missing",
+		"searchLine": common_lib.build_search_line(["resource", "alicloud_oss_bucket", name], []),
+	}
+}

assets/queries/terraform/alicloud/oss_bucket_versioning_disabled/test/negative1.tf

@@ -0,0 +1,8 @@
+resource "alicloud_oss_bucket" "bucket-versioning1" {
+  bucket = "bucket-170309-versioning"
+  acl    = "private"
+
+  versioning {
+    status = "Enabled"
+  }
+}

assets/queries/terraform/alicloud/oss_bucket_versioning_disabled/test/positive1.tf

@@ -0,0 +1,8 @@
+resource "alicloud_oss_bucket" "bucket-versioning2" {
+  bucket = "bucket-170309-versioning"
+  acl    = "private"
+
+  versioning {
+    status = "Suspended"
+  }
+}

assets/queries/terraform/alicloud/oss_bucket_versioning_disabled/test/positive2.tf

@@ -0,0 +1,4 @@
+resource "alicloud_oss_bucket" "bucket-versioning3" {
+  bucket = "bucket-170309-versioning"
+  acl    = "private"
+}

assets/queries/terraform/alicloud/oss_bucket_versioning_disabled/test/positive_expected_result.json

@@ -0,0 +1,14 @@
+[
+    {
+      "queryName": "OSS Bucket Versioning Disabled",
+      "severity": "MEDIUM",
+      "line": 6,
+      "fileName": "positive1.tf"
+    },
+    {
+        "queryName": "OSS Bucket Versioning Disabled",
+        "severity": "MEDIUM",
+        "line": 1,
+        "fileName": "positive2.tf"
+      }
+  ]