Control: VPC security group rule should have description for rules

Description

One of the best practices when creating security group rules in AWS is to add a description to the group and each of its rules for better clarity.

Usage

Run the control in your terminal:

powerpipe control run terraform_aws_compliance.control.vpc_security_group_rule_description_for_rules

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run terraform_aws_compliance.control.vpc_security_group_rule_description_for_rules --share

SQL

This control uses a named query:

select
  address as resource,
  case
    when (attributes_std -> 'description') is null then 'alarm'
    else 'ok'
  end status,
  split_part(address, '.', 2) || case
    when (attributes_std -> 'description') is null then ' no description defined'
    else ' description defined'
  end || '.' reason
  , path || ':' || start_line
from
  terraform_resource
where
  type = 'aws_security_group_rule';

Control: VPC security group rule should have description for rules

Description

Usage

SQL

Tags