Control: 4.3 Ensure no security groups allow ingress from 0.0.0.0/0 to port 22

Description

Security groups provide stateful filtering of ingress/egress network traffic to Alibaba Cloud resources. It is recommended that no security group allows unrestricted ingress access to port 22.

Remediation

From Console

1. Logon to ECS Console.
2. In the left pane, click to expand Network and Security, click Security Groups.
3. For each security group, perform the following:
   • Select the security group.
   • Click Add Rules.
   • Click the Inbound tab.
   • Identify the rules to be removed.
   • Click Delete in the Remove column.
   • Click OK.