Nifcloud Computing Undefined Description To Security Group

• Query id: 41c127a9-3a85-4bc3-a333-ed374eb9c3e4
• Query name: Nifcloud Computing Undefined Description To Security Group
• Platform: Terraform
• Severity: Info
• Category: Best Practices
• CWE: 665
• URL: Github

Description

It's considered a best practice for Security Group to have a description
Documentation

Code samples

Code samples with security vulnerabilities

Positive test num. 1 - tf file

resource "nifcloud_security_group" "positive" {
  group_name  = "http"
}

Code samples without security vulnerabilities

Negative test num. 1 - tf file

resource "nifcloud_security_group" "negative" {
  group_name  = "http"
  description = "Allow inbound HTTP traffic"
}