When vulnerabilities [are declared](https://github.com/alertlogic/ci_lambda_checks/blob/master/checks/awsConfigRules.js#L74-L82), there is no risk declared with them.
When vulnerabilities are declared, there is no risk declared with them.