Security Group Best Practice

ID: pack:aliyun:security-group-best-practice-v2

Description

Best practices for ECS security group configuration to ensure network security and access control. Includes checks for risky ports, access restrictions, and security group settings.

Included Rules

• rule:aliyun:ecs-instance-attached-security-group
• rule:aliyun:ecs-security-group-egress-not-all-access
• rule:aliyun:ecs-security-group-not-internet-cidr-access
• rule:aliyun:ecs-security-group-not-open-all-port
• rule:aliyun:ecs-security-group-not-open-all-protocol
• rule:aliyun:ecs-security-group-risky-ports-check-with-protocol
• rule:aliyun:ecs-security-group-white-list-port-check
• rule:aliyun:sg-public-access-check