touchups

Author: ntner

pkg/cli/rack.go

@@ -70,6 +70,7 @@ var paramGroups = map[string]map[string]bool{
 		"NLBPreserveClientIP":           true,
 	},
 	"security": {
+		"SecretsManagerEnv":                     true,
 		"BuildInstancePolicy":                   true, // dual-listed in build
 		"BuildInstanceSecurityGroup":            true,
 		"ECSExec":                               true,
@@ -155,6 +156,7 @@ var paramGroups = map[string]map[string]bool{
 		"RouterMitigationMode":    true,
 	},
 	"logging": {
+		"ContainerInsights": true,
 		"LogBucket":         true,
 		"LogDriver":         true,
 		"LogRetention":      true,

pkg/cli/rack_group_test.go

@@ -221,5 +221,5 @@ func TestParamGroupsCoverRackJSON(t *testing.T) {
 	}
 	require.Empty(t, stale, "paramGroups members not in rack.json Parameters: %v", stale)
 
-	require.Equal(t, 111, len(rack.Parameters), "post-hardening rack.json should have 111 Parameters")
+	require.Equal(t, 116, len(rack.Parameters), "post-hardening rack.json should have 116 Parameters")
 }