Network misconfigurations

Network security group rule allows unrestricted incoming access from the Internet

Description

Azure network security group rules allow or deny traffic when its conditions are met. The rules allow users to specify the type of traffic, such as ports ,protocols, source and destination of the traffic, including IP addresses, subnets, and instances. {AzureNetworkSecurityGroupRule} allows unrestricted access from the Internet.
  • Recommended Mitigation

    Restrict access from the Internet to allow incoming traffic from allowed IP addresses only.