[ELI-702] - disabling signing enforcement for now

Author: TOEL2

infrastructure/modules/lambda/locals.tf

@@ -1,3 +1,5 @@
 locals {
-  enable_lambda_code_signing = contains(["test", "preprod", "prod"], var.environment)
+  enable_lambda_code_signing = false
+  # enable_lambda_code_signing = contains(["test", "preprod", "prod"], var.environment)
+  # For the next deployment ^
 }

infrastructure/stacks/iams-developer-roles/github_actions_policies.tf

@@ -710,6 +710,8 @@ resource "aws_iam_policy" "kinesis_management" {
 }
 
 resource "aws_iam_policy" "code_signing_management" {
+  #checkov:skip=CKV_AWS_290: Actions require wildcard resource for Lambda code signing configs and Signer jobs
+  #checkov:skip=CKV_AWS_235: Actions require wildcard resource for Lambda code signing configs and Signer jobs
   name        = "code-signing-management"
   description = "Allow GitHub Actions to manage Lambda code signing and start Signer jobs"
   path        = "/service-policies/"