Resource module sourced from raw GitHub URL (no version pin)

What it checks

Resource module sourced from raw GitHub URL (no version pin)

Where it applies

Terraform: module

CloudFormation: no CloudFormation type maps to these resources yet.

How to fix it

1. Pin: source = "github.com/<owner>/<repo>?ref=v1.2.3". For registry modules, set version = "~> 5.50". Lockfile commits the hash.

Frameworks

• AWS Well-Architected OPS.5

These mappings are advisory, not an attestation of compliance.

Vendor documentation

All rules