'Make sure the RDS SG does not contain a cidr with a subnet length of zero.'

def check_securitygroup_zero_subnet(self, sg_item):

    tag = 'RDS    Security    Group    subnet    mask    is    /0'
    severity = 10
    for ipr in sg_item.config.get('ip_ranges', []):
        cidr = ipr.get('cidr_ip', None)
        if (cidr and ('/' in cidr) and (not (cidr == '0.0.0.0/0')) and (not (cidr == '10.0.0.0/8'))):
            mask = int(cidr.split('/')[1])
            if (mask == 0):
                self.add_issue(severity, tag, sg_item, notes=cidr)
