TF 0210 - SymbioticSec/Symbiotic-Vulnerability-Database GitHub Wiki
Missing description for security group/security group rule.
Property | Value |
---|---|
Language | |
Severity | |
Service | elasticache |
Provider | AWS |
Description
Security groups or security group rules are missing descriptive text, making it unclear what each rule is intended for. This lack of documentation complicates management and auditing of firewall configurations.
Impact
Without descriptions, it becomes difficult to understand the purpose of security rules, increasing the risk of accidental misconfiguration, overlooked vulnerabilities, and slower incident response during audits or troubleshooting.
Resolution
Add descriptions for all security groups and rules