Rule: VPC Security Groups Should Restrict Ingress Access on Common Ports

Rule Description:

Troubleshooting Steps (if applicable):

2. 1.
   Identify the VPC security group in question.
4. 2.
   Check the current inbound rules for the security group.
6. 3.
   Verify if any of the specified ports (20, 21, 22, 3306, 3389, 4333) allow access from the 0.0.0.0/0 IP range.
8. 4.
   Update the security group rules to comply with the restriction.

Necessary Codes (if applicable):

Remediation Steps:

2. 1.
   Open the AWS Management Console and navigate to the EC2 service.
4. 2.
   In the EC2 dashboard, select "Security Groups" from the left sidebar.
6. 3.
   Locate the security group associated with the VPC that needs to be updated.
8. 4.
   Select the desired security group and click on the "Inbound Rules" tab at the bottom.
10. 5.
    Identify the rules that allow ingress access on ports 20, 21, 22, 3306, 3389, and 4333 from the 0.0.0.0/0 IP range.
12. 6.
    To update the rule, select the rule and click on the "Edit" button.
14. 7.
    In the source field, change the IP range from 0.0.0.0/0 to a more restricted IP range, if applicable.
16. 8.
    Alternatively, you can remove the existing rule and add a new rule with the desired IP range.
18. 9.
    Click on "Save" to apply the changes.
20. 10.
    Repeat steps 5-9 for each rule that violates the requirement.
22. 11.
    Verify that all the specified ports are restricted from the 0.0.0.0/0 IP range by reviewing the inbound rules.