ENG-44573: Session identification request resource provider

[meghana-pedduri]

Example usage:

resource "traceable_session_identification_request_rule" "example" {
  name             = "example-session-rule"
  description      = "This is an example session identification rule"
  environment_names = ["dev", "prod"]
  service_names     = ["service1", "service2"]
  url_match_regexes = ["^/api/.*$", "^/internal/.*$"]

  token_extraction_condition_list {
    condition_request_header {
      key      = "X-Example-Header"
      operator = "EQUALS"
      value    = "example-value"
    }
  }

  session_token_details {
    token_request_header {
      token_key = "Authorization"
      operator  = "MATCHES_REGEX"
    }
  }

  obfuscation       = true
  expiration_type   = "JWT"

  token_value_transformation_list {
    json_path             = "$.token"
  }
}

Schema:

Required:
name: (string) name of the rule
service_names: (list of string) list of all the services the rule would be applicable for
environment_names: (list of string) list of all the env the rule would be applicable for
session_token_details: (list of objects - atmost one allowed): Details of the session token of type request
obfuscation: (boolean) If the obfuscation strategy of HASH to be used
Optional:
description: (string) description of the rule
url_match_regexes: (list of strings) the regex values of the url indicating its segment values that we would choose to redact
token_extraction_condition_list: (list of objects) the conditions to satisfy token extraction
expiration_type: (string) expiration is jwt based or not applicable
token_value_transformation_list: (list of objects) conditions for value transformations

[prisma-cloud-devsecops]

Prisma Cloud has found errors in this PR ⬇️

[prisma-cloud-devsecops]

  Random High Entropy String detected in code
    Resource: 7195595776a225335a8d5f1413649a0c003a9ad2 | Checkov ID: CKV_SECRET_80

Description

Entropy checks help detect unstructured secrets by measuring the entropy level of a single string. Entropy is a concept used to assign a numerical score to how unpredictable a password is or the likelihood of highly random data in a string of characters. Strings with a high entropy score are flagged as suspected secrets.