Control: Unused EC2 security groups should be removed
Description
This AWS control checks that security groups are attached to AWS Elastic Compute Cloud (AWS EC2) instances or to an elastic network interface. The control will fail if the security group is not associated with an AWS EC2 instance or an elastic network interface.
Usage
Run the control in your terminal:
powerpipe control run aws_compliance.control.vpc_security_group_unusedSnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run aws_compliance.control.vpc_security_group_unused --shareSQL
This control uses a named query:
vpc_security_group_unused