added policy to check description security group for elasticache

avd_docs/aws/elasticache/AVD-AWS-0196/docs.md

@@ -0,0 +1,13 @@
+
+Missing description for security group/security group rule.
+
+### Impact
+<!-- Add Impact here -->
+
+<!-- DO NOT CHANGE -->
+{{ remediationActions }}
+
+### Links
+- https://docs.aws.amazon.com/AmazonElastiCache/latest/mem-ug/SecurityGroups.Creating.html
+
+

avd_docs/kubernetes/general/AVD-KSV-01010/docs.md

@@ -2,7 +2,7 @@
 Storing sensitive content such as usernames and email addresses in configMaps is unsafe
 
 ### Impact
-Unsafe storage of sensitive content in configMaps could lead to the information being compromised.
+<!-- Add Impact here -->
 
 <!-- DO NOT CHANGE -->
 {{ remediationActions }}

internal/rules/policies/cloud/policies/aws/elasticache/add_description_for_security_group.rego

@@ -0,0 +1,25 @@
+# METADATA
+# title: "Elasticache Security Group Description"
+# description: "Missing description for security group/security group rule."
+# scope: package
+# schemas:
+# - input: schema.input
+# related_resources:
+# - https://docs.aws.amazon.com/AmazonElastiCache/latest/mem-ug/SecurityGroups.Creating.html
+# custom:
+#   avd_id: AVD-AWS-0196
+#   provider: aws
+#   service: elasticache
+#   severity: LOW
+#   short_code: add-description-for-security-group
+#   recommended_action: "Security groups and security group rules should include a description for auditing purposes. Simplifies auditing, debugging, and managing security groups."
+#   input:
+#     selector:
+#     - type: cloud
+package builtin.aws.elasticache.aws0196
+
+deny[res] {
+	sg := input.aws.elasticache.securitygroups[_]
+	sg.description.value == ""
+	res := result.new("Security group does not have a description.", sg.description)
+}

internal/rules/policies/cloud/policies/aws/elasticache/add_description_for_security_group_test.rego

@@ -0,0 +1,11 @@
+package builtin.aws.elasticache.aws0196
+
+test_detects_when_description_not_have {
+	r := deny with input as {"aws": {"elasticache": {"securitygroups": [{"description": {"value": ""}}]}}}
+	count(r) == 1
+}
+
+test_when_description_have {
+	r := deny with input as {"aws": {"elasticache": {"securitygroups": [{"description": {"value": "description"}}]}}}
+	count(r) == 0
+}