Loading controls...
Control: VPC Security groups should only allow unrestricted incoming traffic for authorized ports
Description
This control checks whether the VPC security groups that are in use allow unrestricted incoming traffic. Optionally the rule checks whether the port numbers are listed in the authorizedTcpPorts parameter. The default values for authorizedTcpPorts are 80 and 443.
Usage
Run the control in your terminal:
powerpipe control run aws_compliance.control.vpc_security_group_allows_ingress_authorized_portsSnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run aws_compliance.control.vpc_security_group_allows_ingress_authorized_ports --shareSQL
This control uses a named query:
vpc_security_group_allows_ingress_authorized_ports