VPC Policies
20 articles
- Ensure Security Groups do not allow unrestricted ingress access to any port
- Ensure Security Groups do not allow unrestricted ingress access to Oracle Ports 1521 or 2483
- Ensure Security Groups do not allow unrestricted ingress access to MySQL port 3306
- Ensure Security Groups do not allow unrestricted ingress access to Postgres port 5432
- Ensure Security Groups do not allow unrestricted ingress access to Redis port 6379
- Ensure Security Groups do not allow unrestricted ingress access to MongoDB ports 27017 and 27018
- Ensure Security Groups do not allow unrestricted ingress access to Cassandra ports 7199 or 9160 or 8888
- Ensure Security Groups do not allow unrestricted ingress access to Memcached port 11211
- Ensure no Network ACLs allow ingress from 0.0.0.0/0 to SSH port 22"
- Ensure no security groups allow ingress from 0.0.0.0/0 or ::/0 to FTP ports 20 or 21
- Ensure no Network ACLs allow ingress from 0.0.0.0/0 to Microsoft RDP port 3389"
- Ensure no security group allow ingress from 0.0.0.0/0 or ::/0 to Telnet port 23
- Ensure no security groups allow ingress from 0.0.0.0/0 or ::/0 to Windows SQL Server ports 1433 or 1434
- Ensure no security groups allow ingress from 0.0.0.0/0 or ::/0 to Kafka port 9092
- Ensure no Network ACLs allow ingress from 0.0.0.0/0 to any port
- Ensure there are no GuardDuty Untreated Findings
- Find VPC security groups with many ingress or egress rules
- Ensure API Gateway Restricted to Private VPCs
- Ensure Security Groups Unrestricted Common Ports
- Ensure no security groups allow ingress from 0.0.0.0/0 or ::/0 to Elasticsearch/Kibana ports