diff --git a/rules/cloud/aws_elasticache_security_group_modified_or_deleted.yml b/rules/cloud/aws_elasticache_security_group_modified_or_deleted.yml
index 80f9578b9..eab2a71ab 100644
--- a/rules/cloud/aws_elasticache_security_group_modified_or_deleted.yml
+++ b/rules/cloud/aws_elasticache_security_group_modified_or_deleted.yml
@@ -16,11 +16,11 @@ detection:
     selection_eventname2:
         - eventName: "Authorize Cache Security Group Ingress"
     selection_eventname3:
-        - eventName:  "Revoke Cache Security Group Ingress"
+        - eventName: "Revoke Cache Security Group Ingress"
     selection_eventname4:
-        - eventName:  "AuthorizeCacheSecurityGroupEgress"
+        - eventName: "AuthorizeCacheSecurityGroupEgress"
     selection_eventname5: 
-        - eventName:  "RevokeCacheSecurityGroupEgress"
+        - eventName: "RevokeCacheSecurityGroupEgress"
     condition: selection_source and selection_eventname1 or selection_eventname2 or selection_eventname3 or selection_eventname4 or selection_eventname5
 level: low
 tags: