Vibe codingMediumvc-g162

Subject Ai code reviewLevel Mid–Senior~15 minCommon in Security interviewsIndustries Software development

Question

An AI agent generated this security group for a Postgres RDS instance after you said "let the app servers reach the database." It applies and the app connects fine in staging. What's the problem?

hcl

1resource "aws_security_group" "db" {2  name   = "prod-db-sg"3  vpc_id = var.vpc_id4 5  ingress {6    description = "Postgres"7    from_port   = 54328    to_port     = 54329    protocol    = "tcp"10    cidr_blocks = ["0.0.0.0/0"]11  }12 13  egress {14    from_port   = 015    to_port     = 016    protocol    = "-1"17    cidr_blocks = ["0.0.0.0/0"]18  }19}

What a strong answer looks like

Treat the AI’s output as a draft to verify, not an answer to trust. Name the specific flaw and the input that triggers it, say how you’d catch it — tests, edge cases, reading critically — and how you’d re-prompt or decompose to get it right.

Learn the concepts

Describe your solution

Vibe coding: describe the solution in plain language (or narrate it) and the coach grades your approach. Generating runnable code from your description is coming next.

Run or narrate your approach, then ask the coach.