Property
Languageterraform
Severitylow
Serviceelasticache
ProviderAWS

Description#

Security groups or security group rules are missing descriptive text, making it unclear what each rule is intended for. This lack of documentation complicates management and auditing of firewall configurations.

Impact#

Without descriptions, it becomes difficult to understand the purpose of security rules, increasing the risk of accidental misconfiguration, overlooked vulnerabilities, and slower incident response during audits or troubleshooting.

Resolution#

Add descriptions for all security groups and rules