Security groups should only allow unrestricted incoming traffic for authorized ports

0

I got one finding which says "This control checks whether the security groups allow unrestricted incoming traffic. The control fails if ports allow unrestricted traffic on ports other than 80 and 443, which are default values for parameter authorizedTcpPorts." So I have one security group and three inbound rule with port is 80 and source is 0.0.0.0/0 , port 443 and source 0.0.0.0/0 and port 8443 and source 0.0.0.0/0 respectively. So according to "The control fails if ports allow unrestricted traffic on ports other than 80 and 443" I deleted inbound rules of port 80 and 443 but after this ECS Fargate services goes down. which I am not able to understand. Please help me in fixing this. Thanks in advance.

1 Antwort
0

The rule states "on ports other than 80 and 443". So in this case that would be port 8443. Try deleting just that one and see if your control allows it.

profile pictureAWS
beantwortet vor einem Jahr
profile pictureAWS
EXPERTE
kentrad
überprüft vor einem Jahr

Du bist nicht angemeldet. Anmelden um eine Antwort zu veröffentlichen.

Eine gute Antwort beantwortet die Frage klar, gibt konstruktives Feedback und fördert die berufliche Weiterentwicklung des Fragenstellers.

Richtlinien für die Beantwortung von Fragen