Description

An AWS Security Group acts as a virtual firewall for your instances to control inbound and outbound traffic. It was detected that the security group {AwsEc2SecurityGroup} is configured to allow inbound access of TCP and UDP from any IP address (0.0.0.0/0 or ::/0) through any port. Accepting unrestricted inbound access may increase the opportunity of malicious activity such as hacking and loss of data.

• 

  Recommended Mitigation

  It is recommended to configure the security group to follow the principle of least privileged access. More details can be found in https://docs.aws.amazon.com/vpc/latest/userguide/VPC_SecurityGroups.html