This new release introduces two new modules for checking Security Groups and Policies.
When investigating an affected resource associated with a Security Group (like an EC2 Instance, a Lambda Function, an RDS, etc.), you can now get as part of it also the configuration and MetaChecks from the associated Security Groups, like unrestricted rules. It is not the same an EC2 Public instance or an EC2 Instance without IMDSv2 if it's associated with a Security Group with unrestricted rules (or not).
When investigating an affected resource associated with a policy (like an SQS, SNS, ElasticCache, ElasticSearch, etc.), you can now get as part of it also the configuration and MetaChecks from the associated policies, like if it's unrestricted, cross-account, and more... It is not the same an ElasticSearch cluster which is Public if it's associated with a policy with unrestricted statements (or not).
Bug fixes and more than 50 new MetaChecks!