Query: Unused EC2 security groups should be removed

Description

This AWS control checks that security groups are attached to AWS Elastic Compute Cloud (AWS EC2) instances or to an elastic network interface. The control will fail if the security group is not associated with an AWS EC2 instance or an elastic network interface.

Query

Tables used in this query:

• aws_ec2_instance
• aws_ec2_network_interface
• aws_vpc_security_group

Controls using this query:

• Unused EC2 security groups should be removed

SQL