Back to All Checks
High EC2 Regional

VPC default security groups should not allow inbound or outbound traffic

CIS

Description

Checks whether the VPC default security group allows inbound and outbound traffic.

Remediation

To modify the VPC default security group to restrict inbound and outbound traffic, follow these steps:

Steps

  1. Log in to the AWS Management Console.
  2. Navigate to the VPC Dashboard at https://console.aws.amazon.com/vpc/.
  3. In the navigation pane, click on 'Security Groups'.
  4. Identify the default security group for your VPC.
  5. Select the default security group and navigate to the 'Inbound Rules' tab.
  6. Remove or modify the inbound rules to restrict all traffic.
  7. Navigate to the 'Outbound Rules' tab.
  8. Remove or modify the outbound rules to restrict all traffic.
  9. Confirm the changes.

Compliance

CIS
Start Your Free Security Check