While the syntax for making policies is way easier than using rego 100%, I find that it's not consistent with changed information. It seems that my version of Tfsec stops checking when something is marked compliant, even when it's changed to be non-compliant (i.e -- I have a rule that says s3 buckets have to meet a naming scheme. It the buckets fit this scheme, it acts as if it does not. If I change a small aspect, it may register the change, but only once., even if I run it without changes)
While the syntax for making policies is way easier than using rego 100%, I find that it's not consistent with changed information. It seems that my version of Tfsec stops checking when something is marked compliant, even when it's changed to be non-compliant (i.e -- I have a rule that says s3 buckets have to meet a naming scheme. It the buckets fit this scheme, it acts as if it does not. If I change a small aspect, it may register the change, but only once., even if I run it without changes)