top of page
EC2.19
Security groups should not allow unrestricted access to ports with high risk
Severity
Cloud Platforms
Resources
Related Standards
Automated
CRITICAL
AWS
Amazon EC2
AWS Foundational Best Practice, CDR, ISO27001, SOC2, NIST CSF, NIST.800-53.r5,
This control checks whether unrestricted incoming traffic for the security groups is accessible to the specified ports [3389; 20; 23; 110; 143; 3306; 8080; 1433; 9200; 9300; 25; 445; 135; 21; 1434; 4333; 5432; 5500; 5601; 22; 3000; 5000; 8088; 8888] that have the highest risk. This control fails if any of the rules in a security group allow ingress traffic from 0.0.0.0/0 or ::/0 for those ports.
bottom of page