Updated on 2024-05-16 GMT+08:00

Ports Have Addresses Restricted

Rule Details

Table 1 Rule details

Parameter

Description

Rule Name

vpc-sg-restricted-common-ports

Identifier

vpc-sg-restricted-common-ports

Description

If a security group allows all IPv4 addresses (0.0.0.0/0) to access a specified port, this security group is noncompliant.

Tag

vpc

Trigger Type

Configuration change

Filter Type

vpc.securityGroups

Configure Rule Parameters

blockedPorts: indicates the list of ports to be restricted. This is an array type parameter. The default value is 20, 21, 3306, and 3389.
  • 20: File Transfer Protocol-data port
  • 21: File Transfer Protocol-control port
  • 3306: mysql port
  • 3389: Remote Desktop Protocol port