turbot/aws_compliance

Control: VPC security groups should restrict ingress CIFS access from 0.0.0.0/0 and ::/0

Description

Common Internet File System (CIFS) is a network file-sharing protocol that allows systems to share files over a network. However, unrestricted CIFS access can expose your data to unauthorized users, leading to potential security risks. It is important to restrict CIFS access to only trusted networks and users to prevent unauthorized access and data breaches.

Usage

Run the control in your terminal:

powerpipe control run aws_compliance.control.vpc_security_group_restrict_ingress_cifs_port_all

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run aws_compliance.control.vpc_security_group_restrict_ingress_cifs_port_all --share

SQL

This control uses a named query:

vpc_security_group_restrict_ingress_cifs_port_all

Tags