We are currently solving the following issue within our repository. Here is the issue text:
--- BEGIN ISSUE ---
CKV_AWS_192 raises an error when run it with terraform_plan framework flag
**Describe the bug**
When I run checkov with terraform_plan framework I receive this error:
```
Traceback (most recent call last):
  File "/usr/bin/checkov", line 9, in <module>
    sys.exit(run())
  File "/usr/lib/python3.9/site-packages/checkov/main.py", line 208, in run
    scan_reports = runner_registry.run(root_folder=root_folder, external_checks_dir=external_checks_dir,
  File "/usr/lib/python3.9/site-packages/checkov/common/runners/runner_registry.py", line 59, in run
    reports = [self.runners[0].run(root_folder, external_checks_dir=external_checks_dir, files=files,
  File "/usr/lib/python3.9/site-packages/checkov/terraform/plan_runner.py", line 67, in run
    self.check_tf_definition(report, runner_filter)
  File "/usr/lib/python3.9/site-packages/checkov/terraform/plan_runner.py", line 93, in check_tf_definition
    self.run_block(definition[block_type], full_file_path, report, scanned_file,
  File "/usr/lib/python3.9/site-packages/checkov/terraform/plan_runner.py", line 109, in run_block
    results = registry.scan(scanned_file, entity, [], runner_filter)
  File "/usr/lib/python3.9/site-packages/checkov/common/checks/base_check_registry.py", line 121, in scan
    result = self.run_check(check, entity_configuration, entity_name, entity_type, scanned_file, skip_info)
  File "/usr/lib/python3.9/site-packages/checkov/common/checks/base_check_registry.py", line 135, in run_check
    result = check.run(
  File "/usr/lib/python3.9/site-packages/checkov/common/checks/base_check.py", line 75, in run
    raise e
  File "/usr/lib/python3.9/site-packages/checkov/common/checks/base_check.py", line 62, in run
    check_result["result"] = self.scan_entity_conf(entity_configuration, entity_type)
  File "/usr/lib/python3.9/site-packages/checkov/terraform/checks/resource/base_resource_check.py", line 27, in scan_entity_conf
    return self.scan_resource_conf(conf)
  File "/usr/lib/python3.9/site-packages/checkov/terraform/checks/resource/aws/WAFACLCVE202144228.py", line 27, in scan_resource_conf
    if managed_group[0].get("name") == ["AWSManagedRulesKnownBadInputsRuleSet"]:
  File "/usr/lib/python3.9/site-packages/checkov/common/parsers/node.py", line 183, in __getattr__
    raise TemplateAttributeError(f'{self.__name__}.{name} is invalid')
checkov.common.parsers.node.TemplateAttributeError: <function ListNode.__name__ at 0x7f295099e1f0>.get is invalid
```

**To Reproduce**
You can use this snippet in order to do that:
```
resource "aws_wafv2_web_acl" "main" {
  name  = "${local.common_vars.environment}-${local.common_vars.country}-main"
  scope = "REGIONAL"
  custom_response_body {
    key          = "main-response-body"
    content      = "BLOCKED BY AWS WAF"
    content_type = "TEXT_PLAIN"
  }
  default_action {
    # Allow traffic unless it is blocked by a rule
    allow {}
  }

  rule {
    name     = "aws-managed-known-bad-inputs"
    priority = 1
    override_action {
      none {}
    }
    statement {
      managed_rule_group_statement {
        name        = "AWSManagedRulesKnownBadInputsRuleSet"
        vendor_name = "AWS"
      }
    }
    visibility_config {
      cloudwatch_metrics_enabled = true
      metric_name                = "aws-managed-known-bad-inputs"
      sampled_requests_enabled   = true
    }
  }

  rule {
    name     = "aws-managed-common-rule-set"
    priority = 2
    override_action {
      none {}
    }
    statement {
      managed_rule_group_statement {
        name        = "AWSManagedRulesCommonRuleSet"
        vendor_name = "AWS"
        excluded_rule {
          name = "SizeRestrictions_BODY"
        }
        excluded_rule {
          name = "CrossSiteScripting_COOKIE"
        }
      }
    }
    visibility_config {
      cloudwatch_metrics_enabled = true
      metric_name                = "aws-managed-common-rule-set"
      sampled_requests_enabled   = true
    }
  }

  rule {
    name     = "rate-limit-ip"
    priority = 3

    action {
      block {}
    }

    statement {
      rate_based_statement {
        limit              = 1000
        aggregate_key_type = "IP"
      }
    }

    visibility_config {
      cloudwatch_metrics_enabled = true
      metric_name                = "rate-limit-ip"
      sampled_requests_enabled   = true
    }
  }

  visibility_config {
    cloudwatch_metrics_enabled = true
    metric_name                = "all"
    sampled_requests_enabled   = false
  }

  tags = {
    Name        = "${local.common_vars.environment}-${local.common_vars.country}-main"
    Description = "rules derived from AWSManagedRulesCommonRuleSet"
  }
}

```
1. terraform plan -out test_output
2. terrform show -json test_output | jq '.' > test_output.json
3. checkov --framework=terraform_plan -d .


**Expected behavior**
Failed or Passed not raising python error

**Desktop (please complete the following information):**
 - Linux 09d2041af498 5.11.0-40-generic 44~20.04.2-Ubuntu SMP Tue Oct 26 18:07:44 UTC 2021 x86_64 Linux
 - Checkov Version 2.0.654
 - Terraform Version 1.0.9


--- END ISSUE ---

Below are some code segments, each from a relevant file. One or more of these files may contain bugs.
--- BEGIN FILES ---
Path: `checkov/terraform/checks/resource/aws/WAFACLCVE202144228.py`
Content:
```
1 from typing import Dict, Any
2 
3 from checkov.common.models.enums import CheckCategories, CheckResult
4 from checkov.common.util.type_forcers import force_list
5 from checkov.terraform.checks.resource.base_resource_check import BaseResourceCheck
6 
7 
8 class WAFACLCVE202144228(BaseResourceCheck):
9     def __init__(self) -> None:
10         name = "Ensure WAF prevents message lookup in Log4j2. See CVE-2021-44228 aka log4jshell"
11         id = "CKV_AWS_192"
12         supported_resources = ["aws_wafv2_web_acl"]
13         categories = [CheckCategories.APPLICATION_SECURITY]
14         super().__init__(name=name, id=id, categories=categories, supported_resources=supported_resources)
15 
16     def scan_resource_conf(self, conf: Dict[str, Any]) -> CheckResult:
17         self.evaluated_keys = ["rule"]
18         rules = conf.get("rule") or []
19         for idx_rule, rule in enumerate(force_list(rules)):
20             self.evaluated_keys = [f"rule/[{idx_rule}]/statement"]
21             statement = rule.get("statement")
22             if statement:
23                 self.evaluated_keys = [f"rule/[{idx_rule}]/statement/[0]/managed_rule_group_statement"]
24                 managed_group = statement[0].get("managed_rule_group_statement")
25                 if managed_group:
26                     self.evaluated_keys = [f"rule/[{idx_rule}]/statement/[0]/managed_rule_group_statement/[0]/name"]
27                     if managed_group[0].get("name") == ["AWSManagedRulesKnownBadInputsRuleSet"]:
28                         self.evaluated_keys.append(
29                             f"rule/[{idx_rule}]/statement/[0]/managed_rule_group_statement/[0]/excluded_rule"
30                         )
31                         excluded_rules = managed_group[0].get("excluded_rule") or []
32                         # rule 'Log4JRCE' should not be set to count
33                         for idx_excluded_rule, excluded_rule in enumerate(force_list(excluded_rules)):
34                             if excluded_rule.get("name") == ["Log4JRCE"]:
35                                 self.evaluated_keys = [
36                                     f"rule/[{idx_rule}]/statement/[0]/managed_rule_group_statement/[0]/name",
37                                     f"rule/[{idx_rule}]/statement/[0]/managed_rule_group_statement/[0]/excluded_rule/[{idx_excluded_rule}]/name",
38                                 ]
39                                 return CheckResult.FAILED
40 
41                         self.evaluated_keys.append(
42                             f"rule/[{idx_rule}]/override_action/[0]/none"
43                         )
44                         override_action = rule.get("override_action")
45                         # check for group override
46                         if override_action and next(iter(override_action[0].keys())) != "none":
47                             return CheckResult.FAILED
48 
49                         return CheckResult.PASSED
50 
51         return CheckResult.FAILED
52 
53 
54 check = WAFACLCVE202144228()
55
```
--- END FILES ---

Please first localize the bug based on the issue statement, and then generate a patch according to the `git diff` format fenced by three backticks.

Here is an example:

```diff
diff --git a/examples/server_async.py b/examples/server_async.py
--- a/examples/server_async.py
+++ b/examples/server_async.py
@@ -313,4 +313,4 @@
 
 
 if __name__ == "__main__":
-    asyncio.run(run_async_server("."), debug=True)
+    asyncio.run(run_async_server(), debug=True)
diff --git a/examples/server_sync.py b/examples/server_sync.py
--- a/examples/server_sync.py
+++ b/examples/server_sync.py
@@ -313,5 +313,5 @@
 
 
 if __name__ == "__main__":
-    server = run_sync_server(".")
+    server = run_sync_server()
     server.shutdown()

```

diff --git a/checkov/terraform/checks/resource/aws/WAFACLCVE202144228.py b/checkov/terraform/checks/resource/aws/WAFACLCVE202144228.py
--- a/checkov/terraform/checks/resource/aws/WAFACLCVE202144228.py
+++ b/checkov/terraform/checks/resource/aws/WAFACLCVE202144228.py
@@ -24,14 +24,14 @@
                 managed_group = statement[0].get("managed_rule_group_statement")
                 if managed_group:
                     self.evaluated_keys = [f"rule/[{idx_rule}]/statement/[0]/managed_rule_group_statement/[0]/name"]
-                    if managed_group[0].get("name") == ["AWSManagedRulesKnownBadInputsRuleSet"]:
+                    if managed_group[0] and managed_group[0].get("name") == ["AWSManagedRulesKnownBadInputsRuleSet"]:
                         self.evaluated_keys.append(
                             f"rule/[{idx_rule}]/statement/[0]/managed_rule_group_statement/[0]/excluded_rule"
                         )
                         excluded_rules = managed_group[0].get("excluded_rule") or []
                         # rule 'Log4JRCE' should not be set to count
                         for idx_excluded_rule, excluded_rule in enumerate(force_list(excluded_rules)):
-                            if excluded_rule.get("name") == ["Log4JRCE"]:
+                            if excluded_rule and excluded_rule.get("name") == ["Log4JRCE"]:
                                 self.evaluated_keys = [
                                     f"rule/[{idx_rule}]/statement/[0]/managed_rule_group_statement/[0]/name",
                                     f"rule/[{idx_rule}]/statement/[0]/managed_rule_group_statement/[0]/excluded_rule/[{idx_excluded_rule}]/name",
@@ -43,7 +43,9 @@
                         )
                         override_action = rule.get("override_action")
                         # check for group override
-                        if override_action and next(iter(override_action[0].keys())) != "none":
+                        override_action_none = override_action[0].get("none")
+                        # Terraform plan includes both keys, but one is a dict and the not chosen one a list
+                        if not override_action_none or not isinstance(override_action_none[0], dict):
                             return CheckResult.FAILED
 
                         return CheckResult.PASSED

{"golden_diff": "diff --git a/checkov/terraform/checks/resource/aws/WAFACLCVE202144228.py b/checkov/terraform/checks/resource/aws/WAFACLCVE202144228.py\n--- a/checkov/terraform/checks/resource/aws/WAFACLCVE202144228.py\n+++ b/checkov/terraform/checks/resource/aws/WAFACLCVE202144228.py\n@@ -24,14 +24,14 @@\n                 managed_group = statement[0].get(\"managed_rule_group_statement\")\n                 if managed_group:\n                     self.evaluated_keys = [f\"rule/[{idx_rule}]/statement/[0]/managed_rule_group_statement/[0]/name\"]\n-                    if managed_group[0].get(\"name\") == [\"AWSManagedRulesKnownBadInputsRuleSet\"]:\n+                    if managed_group[0] and managed_group[0].get(\"name\") == [\"AWSManagedRulesKnownBadInputsRuleSet\"]:\n                         self.evaluated_keys.append(\n                             f\"rule/[{idx_rule}]/statement/[0]/managed_rule_group_statement/[0]/excluded_rule\"\n                         )\n                         excluded_rules = managed_group[0].get(\"excluded_rule\") or []\n                         # rule 'Log4JRCE' should not be set to count\n                         for idx_excluded_rule, excluded_rule in enumerate(force_list(excluded_rules)):\n-                            if excluded_rule.get(\"name\") == [\"Log4JRCE\"]:\n+                            if excluded_rule and excluded_rule.get(\"name\") == [\"Log4JRCE\"]:\n                                 self.evaluated_keys = [\n                                     f\"rule/[{idx_rule}]/statement/[0]/managed_rule_group_statement/[0]/name\",\n                                     f\"rule/[{idx_rule}]/statement/[0]/managed_rule_group_statement/[0]/excluded_rule/[{idx_excluded_rule}]/name\",\n@@ -43,7 +43,9 @@\n                         )\n                         override_action = rule.get(\"override_action\")\n                         # check for group override\n-                        if override_action and next(iter(override_action[0].keys())) != \"none\":\n+                        override_action_none = override_action[0].get(\"none\")\n+                        # Terraform plan includes both keys, but one is a dict and the not chosen one a list\n+                        if not override_action_none or not isinstance(override_action_none[0], dict):\n                             return CheckResult.FAILED\n \n                         return CheckResult.PASSED\n", "issue": "CKV_AWS_192 raises an error when run it with terraform_plan framework flag\n**Describe the bug**\r\nWhen I run checkov with terraform_plan framework I receive this error:\r\n```\r\nTraceback (most recent call last):\r\n  File \"/usr/bin/checkov\", line 9, in <module>\r\n    sys.exit(run())\r\n  File \"/usr/lib/python3.9/site-packages/checkov/main.py\", line 208, in run\r\n    scan_reports = runner_registry.run(root_folder=root_folder, external_checks_dir=external_checks_dir,\r\n  File \"/usr/lib/python3.9/site-packages/checkov/common/runners/runner_registry.py\", line 59, in run\r\n    reports = [self.runners[0].run(root_folder, external_checks_dir=external_checks_dir, files=files,\r\n  File \"/usr/lib/python3.9/site-packages/checkov/terraform/plan_runner.py\", line 67, in run\r\n    self.check_tf_definition(report, runner_filter)\r\n  File \"/usr/lib/python3.9/site-packages/checkov/terraform/plan_runner.py\", line 93, in check_tf_definition\r\n    self.run_block(definition[block_type], full_file_path, report, scanned_file,\r\n  File \"/usr/lib/python3.9/site-packages/checkov/terraform/plan_runner.py\", line 109, in run_block\r\n    results = registry.scan(scanned_file, entity, [], runner_filter)\r\n  File \"/usr/lib/python3.9/site-packages/checkov/common/checks/base_check_registry.py\", line 121, in scan\r\n    result = self.run_check(check, entity_configuration, entity_name, entity_type, scanned_file, skip_info)\r\n  File \"/usr/lib/python3.9/site-packages/checkov/common/checks/base_check_registry.py\", line 135, in run_check\r\n    result = check.run(\r\n  File \"/usr/lib/python3.9/site-packages/checkov/common/checks/base_check.py\", line 75, in run\r\n    raise e\r\n  File \"/usr/lib/python3.9/site-packages/checkov/common/checks/base_check.py\", line 62, in run\r\n    check_result[\"result\"] = self.scan_entity_conf(entity_configuration, entity_type)\r\n  File \"/usr/lib/python3.9/site-packages/checkov/terraform/checks/resource/base_resource_check.py\", line 27, in scan_entity_conf\r\n    return self.scan_resource_conf(conf)\r\n  File \"/usr/lib/python3.9/site-packages/checkov/terraform/checks/resource/aws/WAFACLCVE202144228.py\", line 27, in scan_resource_conf\r\n    if managed_group[0].get(\"name\") == [\"AWSManagedRulesKnownBadInputsRuleSet\"]:\r\n  File \"/usr/lib/python3.9/site-packages/checkov/common/parsers/node.py\", line 183, in __getattr__\r\n    raise TemplateAttributeError(f'{self.__name__}.{name} is invalid')\r\ncheckov.common.parsers.node.TemplateAttributeError: <function ListNode.__name__ at 0x7f295099e1f0>.get is invalid\r\n```\r\n\r\n**To Reproduce**\r\nYou can use this snippet in order to do that:\r\n```\r\nresource \"aws_wafv2_web_acl\" \"main\" {\r\n  name  = \"${local.common_vars.environment}-${local.common_vars.country}-main\"\r\n  scope = \"REGIONAL\"\r\n  custom_response_body {\r\n    key          = \"main-response-body\"\r\n    content      = \"BLOCKED BY AWS WAF\"\r\n    content_type = \"TEXT_PLAIN\"\r\n  }\r\n  default_action {\r\n    # Allow traffic unless it is blocked by a rule\r\n    allow {}\r\n  }\r\n\r\n  rule {\r\n    name     = \"aws-managed-known-bad-inputs\"\r\n    priority = 1\r\n    override_action {\r\n      none {}\r\n    }\r\n    statement {\r\n      managed_rule_group_statement {\r\n        name        = \"AWSManagedRulesKnownBadInputsRuleSet\"\r\n        vendor_name = \"AWS\"\r\n      }\r\n    }\r\n    visibility_config {\r\n      cloudwatch_metrics_enabled = true\r\n      metric_name                = \"aws-managed-known-bad-inputs\"\r\n      sampled_requests_enabled   = true\r\n    }\r\n  }\r\n\r\n  rule {\r\n    name     = \"aws-managed-common-rule-set\"\r\n    priority = 2\r\n    override_action {\r\n      none {}\r\n    }\r\n    statement {\r\n      managed_rule_group_statement {\r\n        name        = \"AWSManagedRulesCommonRuleSet\"\r\n        vendor_name = \"AWS\"\r\n        excluded_rule {\r\n          name = \"SizeRestrictions_BODY\"\r\n        }\r\n        excluded_rule {\r\n          name = \"CrossSiteScripting_COOKIE\"\r\n        }\r\n      }\r\n    }\r\n    visibility_config {\r\n      cloudwatch_metrics_enabled = true\r\n      metric_name                = \"aws-managed-common-rule-set\"\r\n      sampled_requests_enabled   = true\r\n    }\r\n  }\r\n\r\n  rule {\r\n    name     = \"rate-limit-ip\"\r\n    priority = 3\r\n\r\n    action {\r\n      block {}\r\n    }\r\n\r\n    statement {\r\n      rate_based_statement {\r\n        limit              = 1000\r\n        aggregate_key_type = \"IP\"\r\n      }\r\n    }\r\n\r\n    visibility_config {\r\n      cloudwatch_metrics_enabled = true\r\n      metric_name                = \"rate-limit-ip\"\r\n      sampled_requests_enabled   = true\r\n    }\r\n  }\r\n\r\n  visibility_config {\r\n    cloudwatch_metrics_enabled = true\r\n    metric_name                = \"all\"\r\n    sampled_requests_enabled   = false\r\n  }\r\n\r\n  tags = {\r\n    Name        = \"${local.common_vars.environment}-${local.common_vars.country}-main\"\r\n    Description = \"rules derived from AWSManagedRulesCommonRuleSet\"\r\n  }\r\n}\r\n\r\n```\r\n1. terraform plan -out test_output\r\n2. terrform show -json test_output | jq '.' > test_output.json\r\n3. checkov --framework=terraform_plan -d .\r\n\r\n\r\n**Expected behavior**\r\nFailed or Passed not raising python error\r\n\r\n**Desktop (please complete the following information):**\r\n - Linux 09d2041af498 5.11.0-40-generic 44~20.04.2-Ubuntu SMP Tue Oct 26 18:07:44 UTC 2021 x86_64 Linux\r\n - Checkov Version 2.0.654\r\n - Terraform Version 1.0.9\r\n\n", "before_files": [{"content": "from typing import Dict, Any\n\nfrom checkov.common.models.enums import CheckCategories, CheckResult\nfrom checkov.common.util.type_forcers import force_list\nfrom checkov.terraform.checks.resource.base_resource_check import BaseResourceCheck\n\n\nclass WAFACLCVE202144228(BaseResourceCheck):\n    def __init__(self) -> None:\n        name = \"Ensure WAF prevents message lookup in Log4j2. See CVE-2021-44228 aka log4jshell\"\n        id = \"CKV_AWS_192\"\n        supported_resources = [\"aws_wafv2_web_acl\"]\n        categories = [CheckCategories.APPLICATION_SECURITY]\n        super().__init__(name=name, id=id, categories=categories, supported_resources=supported_resources)\n\n    def scan_resource_conf(self, conf: Dict[str, Any]) -> CheckResult:\n        self.evaluated_keys = [\"rule\"]\n        rules = conf.get(\"rule\") or []\n        for idx_rule, rule in enumerate(force_list(rules)):\n            self.evaluated_keys = [f\"rule/[{idx_rule}]/statement\"]\n            statement = rule.get(\"statement\")\n            if statement:\n                self.evaluated_keys = [f\"rule/[{idx_rule}]/statement/[0]/managed_rule_group_statement\"]\n                managed_group = statement[0].get(\"managed_rule_group_statement\")\n                if managed_group:\n                    self.evaluated_keys = [f\"rule/[{idx_rule}]/statement/[0]/managed_rule_group_statement/[0]/name\"]\n                    if managed_group[0].get(\"name\") == [\"AWSManagedRulesKnownBadInputsRuleSet\"]:\n                        self.evaluated_keys.append(\n                            f\"rule/[{idx_rule}]/statement/[0]/managed_rule_group_statement/[0]/excluded_rule\"\n                        )\n                        excluded_rules = managed_group[0].get(\"excluded_rule\") or []\n                        # rule 'Log4JRCE' should not be set to count\n                        for idx_excluded_rule, excluded_rule in enumerate(force_list(excluded_rules)):\n                            if excluded_rule.get(\"name\") == [\"Log4JRCE\"]:\n                                self.evaluated_keys = [\n                                    f\"rule/[{idx_rule}]/statement/[0]/managed_rule_group_statement/[0]/name\",\n                                    f\"rule/[{idx_rule}]/statement/[0]/managed_rule_group_statement/[0]/excluded_rule/[{idx_excluded_rule}]/name\",\n                                ]\n                                return CheckResult.FAILED\n\n                        self.evaluated_keys.append(\n                            f\"rule/[{idx_rule}]/override_action/[0]/none\"\n                        )\n                        override_action = rule.get(\"override_action\")\n                        # check for group override\n                        if override_action and next(iter(override_action[0].keys())) != \"none\":\n                            return CheckResult.FAILED\n\n                        return CheckResult.PASSED\n\n        return CheckResult.FAILED\n\n\ncheck = WAFACLCVE202144228()\n", "path": "checkov/terraform/checks/resource/aws/WAFACLCVE202144228.py"}], "after_files": [{"content": "from typing import Dict, Any\n\nfrom checkov.common.models.enums import CheckCategories, CheckResult\nfrom checkov.common.util.type_forcers import force_list\nfrom checkov.terraform.checks.resource.base_resource_check import BaseResourceCheck\n\n\nclass WAFACLCVE202144228(BaseResourceCheck):\n    def __init__(self) -> None:\n        name = \"Ensure WAF prevents message lookup in Log4j2. See CVE-2021-44228 aka log4jshell\"\n        id = \"CKV_AWS_192\"\n        supported_resources = [\"aws_wafv2_web_acl\"]\n        categories = [CheckCategories.APPLICATION_SECURITY]\n        super().__init__(name=name, id=id, categories=categories, supported_resources=supported_resources)\n\n    def scan_resource_conf(self, conf: Dict[str, Any]) -> CheckResult:\n        self.evaluated_keys = [\"rule\"]\n        rules = conf.get(\"rule\") or []\n        for idx_rule, rule in enumerate(force_list(rules)):\n            self.evaluated_keys = [f\"rule/[{idx_rule}]/statement\"]\n            statement = rule.get(\"statement\")\n            if statement:\n                self.evaluated_keys = [f\"rule/[{idx_rule}]/statement/[0]/managed_rule_group_statement\"]\n                managed_group = statement[0].get(\"managed_rule_group_statement\")\n                if managed_group:\n                    self.evaluated_keys = [f\"rule/[{idx_rule}]/statement/[0]/managed_rule_group_statement/[0]/name\"]\n                    if managed_group[0] and managed_group[0].get(\"name\") == [\"AWSManagedRulesKnownBadInputsRuleSet\"]:\n                        self.evaluated_keys.append(\n                            f\"rule/[{idx_rule}]/statement/[0]/managed_rule_group_statement/[0]/excluded_rule\"\n                        )\n                        excluded_rules = managed_group[0].get(\"excluded_rule\") or []\n                        # rule 'Log4JRCE' should not be set to count\n                        for idx_excluded_rule, excluded_rule in enumerate(force_list(excluded_rules)):\n                            if excluded_rule and excluded_rule.get(\"name\") == [\"Log4JRCE\"]:\n                                self.evaluated_keys = [\n                                    f\"rule/[{idx_rule}]/statement/[0]/managed_rule_group_statement/[0]/name\",\n                                    f\"rule/[{idx_rule}]/statement/[0]/managed_rule_group_statement/[0]/excluded_rule/[{idx_excluded_rule}]/name\",\n                                ]\n                                return CheckResult.FAILED\n\n                        self.evaluated_keys.append(\n                            f\"rule/[{idx_rule}]/override_action/[0]/none\"\n                        )\n                        override_action = rule.get(\"override_action\")\n                        # check for group override\n                        override_action_none = override_action[0].get(\"none\")\n                        # Terraform plan includes both keys, but one is a dict and the not chosen one a list\n                        if not override_action_none or not isinstance(override_action_none[0], dict):\n                            return CheckResult.FAILED\n\n                        return CheckResult.PASSED\n\n        return CheckResult.FAILED\n\n\ncheck = WAFACLCVE202144228()\n", "path": "checkov/terraform/checks/resource/aws/WAFACLCVE202144228.py"}]}