Skipping checks inside CloudFormation examples?

Is it possible to skip some checks in CloudFormation?

resource "aws_s3_bucket" "foo-bucket" {
  region        = var.region
    #checkov:skip=CKV_AWS_20:The bucket is a public static content host
  bucket        = local.bucket_name
  force_destroy = true
  acl           = "public-read"
}

is a Terraform example given in the docs.

Is it sufficient to just add #checkov:skip=CKV_AWS_20 inside CFN Resource? If so, it would be great to have that in the docs too.

[schosterbarak]

@tomaszdudek7 i see we have a UT for it here: https://github.com/bridgecrewio/checkov/blob/25388a34231e09ac17b266ad9db0b4c0e806e956/tests/cloudformation/parser/skip.yaml#L5

https://github.com/bridgecrewio/checkov/blob/0668a141e447bd0c50fd8db95930b0a523fa94b6/tests/cloudformation/parser/test_cfn_yaml.py#L15

i’m not sure what’s not working. can you paste here a sample of cfn that is not working for you?

[schosterbarak]

done 😃 https://github.com/bridgecrewio/checkov/commit/9776a2ec02d3b0d550ca3a169c51ed557f7fea28