Checks/Aws/Test-CodebuildReportGroupExportEncrypted.ps1

function Test-CodebuildReportGroupExportEncrypted {
    <#
    .SYNOPSIS
        CodeBuild report group exports to S3 are encrypted at rest

    .DESCRIPTION
        **CodeBuild report groups** with export type `S3` are evaluated to confirm their exported test results are encrypted at rest with a **KMS key**.
        
        Report groups configured with `NO_EXPORT` are out of scope.

    .PARAMETER Check
        CIEMCheck object containing check metadata.
    #>

    [CmdletBinding()]
    [OutputType([PSCustomObject[]])]
    param(
        [Parameter(Mandatory)]
        [CIEMCheck]$Check
    )

    $ErrorActionPreference = 'Stop'

    # TODO: Implement check logic based on Prowler check: codebuild_report_group_export_encrypted

    [CIEMScanResult]::Create($Check, 'MANUAL', 'This check requires manual implementation. See Prowler check codebuild_report_group_export_encrypted for reference.', 'N/A', 'codebuild Resources')
}