When vulnerabilities [are declared](https://github.com/alertlogic/ci_lambda_checks/blob/master/checks/awsConfigRules.js#L74-L82), there is no risk declared with them.
