Security group description is missing Affecting VPC service in AWS


Severity

0.0
medium
0
10
    Severity Framework
    Snyk CCSS
    Rule category
    Network / Settings

Is your enviroment affected by this misconfiguration?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
    Frameworks
  • Snyk ID SNYK-CC-00321
  • credit Snyk Research Team

Description

A missing security group description increases the security management overhead.

How to fix?

Set description attribute to a meaningful statement.

Example Configuration

resource "aws_security_group" "allow_some_cidr_valid" {
  name        = "allow_some_cidr_valid"
  description = "Allow inbound SSH from valid CIDR"

  ingress {
    from_port   = 22
    to_port     = 22
    protocol    = "tcp"
    cidr_blocks = ["192.16.0.0/24"]
  }
}