rspec/rules/S6321/description.adoc
github-actions[bot] 6611dde0fd
Create rule S6321: Administration services access should be restricted to specific IP addresses (#188)
* Create rule S6321

* init S6321

* adjust title to follow guidelines

* fix incorrect CWE link

* some fixes

* fix cis category

* fix after review

Co-authored-by: eric-therond-sonarsource <eric-therond-sonarsource@users.noreply.github.com>
Co-authored-by: eric-therond-sonarsource <eric.therond@sonarsource.com>
2021-09-15 08:10:36 +00:00

4 lines
324 B
Plaintext

An AWS security group is a virtual firewall for EC2 instances to control inbound and outbound traffic. An ingress rule allowing traffic from all IP addresses to standard network ports on which administration services traditionally listen, such as 22 for SSH, can expose these services to exploits and unauthorized access.