Description

An AWS Security Group acts as a virtual firewall for your instances to control inbound and outbound traffic. It was detected that the security group {AwsEc2SecurityGroup} is configured to allow inbound access of TCP and UDP from any IP address (0.0.0.0/0 or ::/0) through any port. Accepting unrestricted inbound access may increase the opportunity of malicious activity such as hacking and loss of data.
  • Recommended Mitigation

    It is recommended to configure the security group to follow the principle of least privileged access. More details can be found in <a href="https://docs.aws.amazon.com/vpc/latest/userguide/VPC_SecurityGroups.html" target="_blank" rel="noopener noreferrer">https://docs.aws.amazon.com/vpc/latest/userguide/VPC_SecurityGroups.html</a>