add full ipv6 version of ::/0 in cfn check
@@ -33,6 +33,6 @@ class AbsSecurityGroupUnrestrictedIngress(BaseResourceCheck):
if int(rule['FromPort']) == int(self.port) and int(rule['ToPort']) == int(self.port):
if 'CidrIp' in rule.keys() and rule['CidrIp'] == '0.0.0.0/0': # nosec # nosec
return CheckResult.FAILED
- elif 'CidrIpv6' in rule.keys() and rule['CidrIpv6'] == '::/0':
+ elif 'CidrIpv6' in rule.keys() and rule['CidrIpv6'] in ['::/0', '0000:0000:0000:0000:0000:0000:0000:0000/0']:
return CheckResult.FAILED
return CheckResult.PASSED
\ No newline at end of file
