Access to All Ports by Security Group Not Allowed
Last updated: 2024-02-29 11:02:54
Rule purpose: Check whether the port range value is set to All when rules involving all network segments are configured.
Compliance evaluation logic: When the security group has set rules covering all network segments (0.0.0.0/0 or ::/0), the port range value cannot be set to ALL. If no such rules are set, the port range value can be ALL. The evaluation result is "compliant" if the above conditions are met.
Rule Identifier:
cvm-sg-no-remote-accessRisk Level: High
Applicable Resource Type:
QCS::VPC::SecurityGroupRule trigger type: Configuration change
Keyword: Security Group
Rule parameter: None
Was this page helpful?
You can also Contact Sales or Submit a Ticket for help.
Yes
No
Feedback