hlxsites / hlxsites/prisma-cloud-docs

CKV2_AWS_5 Security Groups are not attached to EC2 instances or ENIs

Open
#1,227 1 comment 2 reactions 0 assignees View on GitHub
Dominant language
JavaScript
Stars
21
Forks
92
PR merge metrics
No merged PRs in 30d

Description

Why does this control only check on aws_instance and aws_network_interface?

Securitygroups can be attached to many other services (vpc endpoint/rds/alb/etc)

Contributor guide

Open the contributing guide

Research direction

Start by reviewing the CKV2_AWS_5 control documentation and its stated checks for aws_instance and aws_network_interface. Compare that scope with the AWS services named in the issue, including VPC endpoints, RDS, and ALB; done should clarify the supported attachments and whether additional coverage is intended.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws
Domain
cloud, security
Issue type
Documentation
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.