top of page
AWS Foundational Security Best Practice
EC2.19
Security groups should not allow unrestricted access to ports with high risk
Severity
Cloud Platforms
Resources
CRITICAL
AWS
Amazon EC2
This control checks whether unrestricted incoming traffic for the security groups is accessible to the specified ports [3389; 20; 23; 110; 143; 3306; 8080; 1433; 9200; 9300; 25; 445; 135; 21; 1434; 4333; 5432; 5500; 5601; 22; 3000; 5000; 8088; 8888] that have the highest risk. This control fails if any of the rules in a security group allow ingress traffic from 0.0.0.0/0 or ::/0 for those ports.
bottom of page