AWS RDS security groups are not defined misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AWS_198
Category - Subcategory	Public Exposure - Ingress Controls
Provider	AWS
Severity	LOW
Framework	Terraform

Impact

By ensuring that AWS RDS security groups are defined, you can help protect your instances from unauthorized access and ensure that only authorized traffic is allowed to reach your instances. This can help prevent data breaches and other security incidents, and can also help ensure that your instances are not overwhelmed by unwanted traffic.

How to Fix

[source,go]

resource "aws_db_security_group" "exists" { name = "rds_sg"

ingress { cidr = "10.0.0.0/24" } }