From 55a2af475be01eaf039306bb9bdf4489a271eaae Mon Sep 17 00:00:00 2001 From: Austin Songer Date: Sat, 24 Jul 2021 09:35:05 -0500 Subject: [PATCH] Update aws_elasticache_security_group_modified_or_deleted.yml --- .../aws_elasticache_security_group_modified_or_deleted.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/rules/cloud/aws_elasticache_security_group_modified_or_deleted.yml b/rules/cloud/aws_elasticache_security_group_modified_or_deleted.yml index 80f9578b9..eab2a71ab 100644 --- a/rules/cloud/aws_elasticache_security_group_modified_or_deleted.yml +++ b/rules/cloud/aws_elasticache_security_group_modified_or_deleted.yml @@ -16,11 +16,11 @@ detection: selection_eventname2: - eventName: "Authorize Cache Security Group Ingress" selection_eventname3: - - eventName: "Revoke Cache Security Group Ingress" + - eventName: "Revoke Cache Security Group Ingress" selection_eventname4: - - eventName: "AuthorizeCacheSecurityGroupEgress" + - eventName: "AuthorizeCacheSecurityGroupEgress" selection_eventname5: - - eventName: "RevokeCacheSecurityGroupEgress" + - eventName: "RevokeCacheSecurityGroupEgress" condition: selection_source and selection_eventname1 or selection_eventname2 or selection_eventname3 or selection_eventname4 or selection_eventname5 level: low tags: