Network misconfigurations

Security group allows inbound access from high risk ports

Description

An AWS Security Group acts as a virtual firewall for your instances to control inbound and outbound traffic. It was detected that the security group {AwsEc2SecurityGroup} is configured to allow inbound access from any IP address (0.0.0.0/0 or ::/0) through common high risk ports. Accepting unrestricted inbound access to these ports may increase the opportunity of malicious activity such as hacking and loss of data.
  • Recommended Mitigation

    Ensure security groups in your account are not configured to allow inbound access from high risk ports. More details can be found in <a href="https://docs.aws.amazon.com/vpc/latest/userguide/VPC_SecurityGroups.html#SecurityGroupRules" target="_blank" rel="noopener noreferrer">https://docs.aws.amazon.com/vpc/latest/userguide/VPC_SecurityGroups.html#SecurityGroupRules</a>