Need the correct compliance and non-compliance test cases for the typescript-cdk rules

[csubhras]

General Issue

https://github.com/cdklabs/cdk-nag/blob/main/RULES.md#errors

The Question

We need correct compliance and non-compliance test cases for the below rules, found that both compliance and non-compliance test cases having similar code snippets on below rules.

• One or more containers in the ECS Task Definition do not have container logging enabled -
• https://github.com/cdklabs/cdk-nag/blob/main/test/rules/ECS.test.ts#L49-L91
• The SageMaker notebook instance is not provisioned inside a VPC - https://github.com/cdklabs/cdk-nag/blob/main/test/rules/SageMaker.test.ts#L50-L71
• The SQS queue is not used as a dead-letter queue (DLQ) and does not have a DLQ enabled - https://github.com/cdklabs/cdk-nag/blob/main/test/rules/SQS.test.ts#L37-L80
• The secret does not have automatic rotation scheduled - https://github.com/cdklabs/cdk-nag/blob/main/test/rules/SecretsManager.test.ts#L33-L88
• The S3 Bucket or bucket policy does not require requests to use SSL - https://github.com/cdklabs/cdk-nag/blob/main/test/rules/S3.test.ts#L287-L531
• The RDS Aurora MySQL serverless cluster does not have audit, error, general, and slowquery Log Exports enabled - https://github.com/cdklabs/cdk-nag/blob/main/test/rules/RDS.test.ts#L88-L180
• The MediaStore container does not require requests to use SSL - https://github.com/cdklabs/cdk-nag/blob/main/test/rules/MediaStore.test.ts#L128-L214
• The EMR cluster does not use a security configuration with local disk encryption enabled - https://github.com/cdklabs/cdk-nag/blob/main/test/rules/EMR.test.ts#L183-L278
• The EMR cluster does not use a security configuration with encryption in transit enabled and configured - https://github.com/cdklabs/cdk-nag/blob/main/test/rules/EMR.test.ts#L63-L155

cdk-nag version

CDK V2

Language

Typescript

Other information

No response

[dontirun]

Are you asking what actual rule file the AwsSolutions NagPack uses? If so you can can see the mappings here. For example

cdk-nag/src/packs/aws-solutions.ts

Lines 321 to 328 in f2f4d5e

	this.applyRule({
	ruleSuffixOverride: 'ECS7',
	info: 'One or more containers in the ECS Task Definition do not have container logging enabled.',
	explanation:
	"Container logging allows operators to view and aggregate the logs from the container. Containers should use the 'awslogs' driver at a minimum.",
	level: NagMessageLevel.ERROR,
	rule: ECSTaskDefinitionContainerLogging,
	node: node,