AWS Elasticache security groups are not defined misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AWS_196
Category - Subcategory	Public Exposure - Ingress Controls
Provider	AWS
Severity	LOW
Framework	Terraform

Impact

By ensuring that AWS Elasticache security groups are defined, you can help protect your clusters from unauthorized access and ensure that only authorized traffic is allowed to reach your clusters. This can help prevent data breaches and other security incidents, and can also help ensure that your clusters are not overwhelmed by unwanted traffic.

How to Fix

[source,go]

resource "aws_elasticache_security_group" "exists" { name = "elasticache-security-group" security_group_names = [aws_security_group.bar.name] }

resource "aws_security_group" "bar" { name = "security-group" }