sg_no_embedded_ingress_rules_tfchecks.json

{
  "checks": [
    {
      "code": "CUS004",
      "description": "Security group rules should be defined with `aws_security_group_rule` instead of embedded.",
      "impact": "Embedded security group rules can cause issues during configuration updates.",
      "resolution": "Move `ingress` rules to `aws_security_group_rule` and attach to `aws_security_group`.",
      "requiredTypes": [
        "resource"
      ],
      "requiredLabels": [
        "aws_security_group"
      ],
      "severity": "MEDIUM",
      "matchSpec": {
          "action": "notPresent",
          "name": "ingress"
        },

      "errorMessage": "`ingress` rules should be moved to `aws_security_group_rule` and attached to `aws_security_group` instead of embedded.",
      "relatedLinks": [
        "https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/security_group_rule",
        "https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/security_group"
      ]
    }
  ]
}