diff --git a/checks/check_extra7154 b/checks/check_extra7154 index 9a38bd46..0b7394be 100644 --- a/checks/check_extra7154 +++ b/checks/check_extra7154 @@ -27,7 +27,7 @@ CHECK_SEVERITY_extra7154="MEDIUM" CHECK_ASFF_RESOURCE_TYPE_extra7154="AwsCloudFormationStack" CHECK_ALTERNATE_check7154="extra7154" CHECK_SERVICENAME_extra7154="cloudformation" -CHECK_RISK_extra7154='Without termination protection enabled, a critical cloudformation stack can be accidently deleted.' +CHECK_RISK_extra7154='Without termination protection enabled; a critical cloudformation stack can be accidently deleted.' CHECK_REMEDIATION_extra7154='Ensure termination protection is enabled for the cloudformation stacks' CHECK_DOC_extra7154='https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-protect-stacks.html' CHECK_CAF_EPIC_extra7154='Infrastructure Protection' @@ -42,7 +42,7 @@ extra7154() { TERMINATION_ENABLED=$(echo $CFN_STACK_DETAILS | jq -r '.Stacks[].EnableTerminationProtection') ROOT_ID=$(echo $CFN_STACK_DETAILS | jq -r '.Stacks[].RootId') if [[ $ROOT_ID != null && $TERMINATION_ENABLED == "false" ]]; then - textInfo "$regx: $stack is a nested stack, enable termination protection on the root stack $ROOT_ID" "$regx" "$stack" "$ROOT_ID" + textInfo "$regx: $stack is a nested stack. Enable termination protection on the root stack $ROOT_ID" "$regx" "$stack" "$ROOT_ID" elif [[ $TERMINATION_ENABLED == "true" ]]; then textPass "$regx: Cloudformation stack $stack has termination protection enabled" "$regx" "$stack" else