Skip to main content

lacework-global-228

Security group attached to EC2 instance should not allow inbound traffic from all ports​

Description​

Security groups provide stateful filtering of ingress/egress network traffic to AWS resources. It is recommended that no security group allows unrestricted ingress access to your EC2 instances to prevent any unauthorized access.

Remediation​

  1. Log in to the AWS Management Console.

  2. Click Services.

  3. Select Compute > EC2.

  4. Select the EC2 instance that has the violation reported by Lacework.

  5. Under the description, click the attached security-group.

  6. In the Inbound tab, edit the inbound rules and restrict access to only the required IPs and ports.