TF 0081 - SymbioticSec/Symbiotic-Vulnerability-Database GitHub Wiki

Missing description for nas security group.

Property Value
Language terraform
Severity low
Service nas
Provider Nifcloud

Description

NAS security groups are defined without a description, making it unclear what each group is intended to protect or allow. This lack of context complicates understanding and managing firewall rules.

Impact

Missing descriptions hinder effective auditing and troubleshooting, increasing the risk of misconfigurations or unused rules being overlooked. This can lead to unauthorized access or operational disruptions due to unclear security group purposes.

Resolution

Add descriptions for all nas security groups