Skip to main content

lacework-global-229

Security group attached to RDS DB instance should not allow inbound traffic from all ports​

Description​

Security groups provide stateful filtering of ingress/egress network traffic to AWS resources. It is recommended that no security group allows unrestricted ingress access to your RDS instances to prevent any unauthorized access.

Remediation​

  1. Log in to the AWS Management Console.

  2. Click Services.

  3. Select Database > RDS.

  4. Click Connectivity and Security > Security Groups.

  5. Select the RDS instance that has the violation reported by Lacework.

  6. Under the Connectivity & security tab, click the attached security-group.

  7. Edit the inbound rules and restrict access to only the required IPs and ports.