'Make sure the SG does not contain any 0.0.0.0/0 or ::/0 ingress rules'

def check_securitygroup_ingress_any(self, sg_item):

    tag = 'Security    Group    ingress    rule    contains    0.0.0.0/0'
    severity = 10
    multiplier = _check_empty_security_group(sg_item)
    for rule in sg_item.config.get('rules', []):
        cidr = rule.get('cidr_ip')
        rtype = rule.get('rule_type')
        if (('0.0.0.0/0' == cidr) and (rtype == 'ingress')):
            notes = '{}    on    {}'.format(cidr, self._port_for_rule(rule))
            self.add_issue((severity * multiplier), tag, sg_item, notes=notes)
        if (('::/0' == cidr) and (rtype == 'ingress')):
            notes = '{}    on    {}'.format(cidr, self._port_for_rule(rule))
            self.add_issue((severity * multiplier), tag, sg_item, notes=notes)
