lacework-global-148
Security group inbound traffic should not allow inbound traffic from all
Description
Security groups provide stateful filtering of ingress/egress network traffic to AWS resources. Best practices recommend that no security group allows unrestricted ingress access to prevent any unauthorized access.
Remediation
Log in to the AWS Management Console.
Select Services.
Select EC2.
From the left panel, select Security Groups.
Select the security group to edit.
Select Edit inbound rules.
For each rule, restrict access to only the appropriate port or port range and IP address range.
Select Save rules.