Control: Ensure no open firewall rules allow ingress from 0.0.00/0 to port TCP 9200 or 9300
Description
Firewall rules provide stateful filtering of ingress/egress network traffic to AWS resources. It is recommended that no security group allows unrestricted ingress access to TCP port 9200 or 9300.
Usage
Run the control in your terminal:
powerpipe control run gcp_compliance.control.compute_firewall_rule_ingress_access_restricted_to_tcp_port_9200_9300
Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run gcp_compliance.control.compute_firewall_rule_ingress_access_restricted_to_tcp_port_9200_9300 --share
SQL
This control uses a named query:
compute_firewall_rule_ingress_access_restricted_to_tcp_port_9200_9300