Data at risk

RDS instance accept connections from world

Risk Level

Informational (4)

Platform(s)
Compliance Frameworks

Description

Alibaba Cloud ApsaraDB for RDS is an online database service for easy operation, manage and scale relational databases. It was found that the instance '{AliCloudRdsDbInstance}' has whitelisted connections from public sources (IpRange = '0.0.0.0/0'). The names of the whitelists who accept connections from anywhere in the world are: {AliCloudRdsDbInstance.AllowlistsWithPublicIPs}. Accepting connections from anywhere in the world might allow unauthorized sources to access your SQL database.
  • Recommended Mitigation

    It is recommended to accept connections only from trusted sources and restrict access from any other sources.