Nifcloud NAS Undefined Description To NAS Security Group

  • Query id: e840c54a-7a4c-405f-b8c1-c49a54b87d11
  • Query name: Nifcloud NAS Undefined Description To NAS Security Group
  • Platform: Terraform
  • Severity: Info
  • Category: Best Practices
  • CWE: 665
  • URL: Github

Description

It's considered a best practice for NAS Security Group to have a description
Documentation

Code samples

Code samples with security vulnerabilities

Positive test num. 1 - tf file
resource "nifcloud_nas_security_group" "positive" {
  group_name  = "app"
}

Code samples without security vulnerabilities

Negative test num. 1 - tf file
resource "nifcloud_nas_security_group" "negative" {
  group_name  = "app"
  description = "Allow from app traffic"
}