Control: Security groups should not allow unrestricted access to ports with high risk
Description
This control checks whether unrestricted incoming traffic for the security groups is accessible to the specified ports that have the highest risk. This control passes when none of the rules in a security group allow ingress traffic from 0.0.0.0/0 for those ports.
Usage
Run the control in your terminal:
powerpipe control run aws_compliance.control.vpc_security_group_restricted_common_portsSnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run aws_compliance.control.vpc_security_group_restricted_common_ports --shareSQL
This control uses a named query:
vpc_security_group_restricted_common_ports