top of page
< Back

AWS Foundational Security Best Practice

EC2.19

Security groups should not allow unrestricted access to ports with high risk

Severity

Cloud Platforms

Resources

CRITICAL

AWS

Amazon EC2

This control checks whether unrestricted incoming traffic for the security groups is accessible to the specified ports [3389; 20; 23; 110; 143; 3306; 8080; 1433; 9200; 9300; 25; 445; 135; 21; 1434; 4333; 5432; 5500; 5601; 22; 3000; 5000; 8088; 8888] that have the highest risk. This control fails if any of the rules in a security group allow ingress traffic from 0.0.0.0/0 or ::/0 for those ports.

bottom of page