Skip to content

AWS Elasticache security groups are not defined

Description

By ensuring that AWS Elasticache security groups are defined, you can help protect your clusters from unauthorized access and ensure that only authorized traffic is allowed to reach your clusters. This can help prevent data breaches and other security incidents, and can also help ensure that your clusters are not overwhelmed by unwanted traffic.

Code Example

go
resource "aws_elasticache_security_group" "exists" {
  name                 = "elasticache-security-group"
  security_group_names = [aws_security_group.bar.name]
}

resource "aws_security_group" "bar" {
  name = "security-group"
}

Remediation

Terraform

Rule Details

FieldValue
IDIAC-0244
SeverityLOW
IaC TypeTerraform
FrameworksTerraform
Checkov IDCKV_AWS_196

References