lacework-global-148
Security group inbound traffic should not allow inbound traffic from all
Description
Security groups provide stateful filtering of ingress/egress network traffic to AWS resources. Best practices recommend that no security group allows unrestricted ingress access to prevent any unauthorized access.
Remediation
- Log in to the AWS Management Console.
- Select Services.
- Select EC2.
- From the left panel, select Security Groups.
- Select the security group to edit.
- Select Edit inbound rules.
- For each rule, restrict access to only the appropriate port or port range and IP address range.
- Select Save rules.