TF 0210 - SymbioticSec/Symbiotic-Vulnerability-Database GitHub Wiki

Missing description for security group/security group rule.

Property Value
Language terraform
Severity low
Service elasticache
Provider AWS

Description

Security groups or security group rules are missing descriptive text, making it unclear what each rule is intended for. This lack of documentation complicates management and auditing of firewall configurations.

Impact

Without descriptions, it becomes difficult to understand the purpose of security rules, increasing the risk of accidental misconfiguration, overlooked vulnerabilities, and slower incident response during audits or troubleshooting.

Resolution

Add descriptions for all security groups and rules