lacework-global-230
Security group attached to Network Interface should not allow inbound traffic from all ports
Description
Security groups provide stateful filtering of ingress/egress network traffic to AWS resources. Best practices recommend that no security group allows unrestricted ingress access to your Network Interfaces to prevent any unauthorized access.
Remediation
- Log in to the AWS Management Console.
- Click Services.
- Select Compute > EC2.
- In the left navigation panel, under Network & Security section, choose Security Groups.
- Select the Security Group that has the violation reported by Lacework.
- In the Inbound tab, edit the inbound rules and restrict access to only the required IPs and ports.