False positive: Imported AWS ACM Certificate with Transparency Logging Set to Disabled

Describe the bug

ScoutSuite complains about an imported AWS ACM certificate having Transparency Logging Set to Disabled. Transparency logging should be done by the issuer at the time of issuance or renewal, so it makes sense that ACM does not have transparency logging enabled for certificates with type IMPORTED.

The management console does not provide any way to enable transparency logging for imported certificates. Additionally, trying to enable transparency logging on an imported certificate via the AWS CLI returns the following error: The UpdateCertificateOptions command is not permitted for imported certificates.

To Reproduce

• Import a third party certificate (e.g. Sectigo) into ACM
• Scan with ScoutSuite 5.12.0

Expectation

• Do not apply this rule to AWS ACM certificates with type IMPORTED