Property
Languageterraform
Severitylow
Servicerdb
ProviderNifcloud

Description#

DB security groups are defined without a description field, making it unclear what each rule is intended for. This omission hinders effective management, auditing, and understanding of firewall configurations.

Impact#

Lack of descriptive context can lead to confusion during security audits, troubleshooting, or team handovers, increasing the risk of misconfiguration, accidental exposure, or unintentional changes to critical security rules.

Resolution#

Add descriptions for all db security groups