Security Group Allows Public IP address(es)

[HugeUA]

New feature motivation

Currently offered check [ec2_securitygroup_allow_wide_open_public_ipv4] nor other checks specific to the services (MySQL, MSSQL, RDP, SSH, etc.) do not flag security groups with a single public IP or Public subnet in source;

Solution Proposed

Create detection that flags any security groups with public IPs in source of the rules

Describe alternatives you've considered

Developing labda that uses regex to check IP/range of every rule of every security group and output list of security groups of non RFC1918 addresses

Additional context

No response