Skip to main content

lacework-global-231

Security group attached to Elastic Load Balancer should not allow inbound traffic from all ports​

Description​

Security groups provide stateful filtering of ingress/egress network traffic to AWS resources. It is recommended that no security group allows unrestricted ingress access to your Elastic Load Balancers (ELB) to prevent any unauthorized access.

Remediation​

  1. Log in to the AWS Management Console.

  2. Click Services.

  3. Select Compute > EC2.

  4. In the left frame of the EC2 Dashboard, select LOAD BALANCING > Load Balancers.

  5. Select the Load Balancer that has the violation reported by Lacework.

  6. Under the description, click the attached security-group.

  7. Edit the inbound rules and restrict access to only the required IPs and ports.