'Make sure the RDS SG does not contain large networks.'

def check_securitygroup_large_subnet(self, sg_item):

    tag = 'RDS    Security    Group    network    larger    than    /24'
    severity = 3
    for ipr in sg_item.config.get('ip_ranges', []):
        cidr = ipr.get('cidr_ip', None)
        if (cidr and (not self._check_inclusion_in_network_whitelist(cidr))):
            if (('/' in cidr) and (not (cidr == '0.0.0.0/0')) and (not (cidr == '10.0.0.0/8'))):
                mask = int(cidr.split('/')[1])
                if ((mask < 24) and (mask > 0)):
                    self.add_issue(severity, tag, sg_item, notes=cidr)
