add-description-to-security-group
Explanation
Security groups and security group rules should include a description for auditing purposes.
Simplifies auditing, debugging, and managing security groups.
Possible Impact
Descriptions provide context for the firewall rule reasons
Suggested Resolution
Add descriptions for all security groups and rules
Insecure Example
The following example will fail the AVD-AWS-0083 check.
---
AWSTemplateFormatVersion: 2010-09-09
Description: Bad example of redshift sgr
Resources:
Queue:
Type: AWS::Redshift::ClusterSecurityGroup
Properties:
Description: ""
Secure Example
The following example will pass the AVD-AWS-0083 check.
---
AWSTemplateFormatVersion: 2010-09-09
Description: Good example of redshift sgr
Resources:
Queue:
Type: AWS::Redshift::ClusterSecurityGroup
Properties:
Description: "Disallow bad stuff"