Skip to content

0.8.0: Address CIS-VpcDefaultSecurityGroupsMustRestrictAllTraffic (#40)
Compare
Choose a tag to compare
@goruha goruha released this 20 Aug 19:10
0.8.0
d16f786
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Verified
Learn about vigilant mode.

What

  • Explicit declare aws_default_security_group without any security_group_rule

Why

  • Address CIS-VpcDefaultSecurityGroupsMustRestrictAllTraffic
  • If aws_default_security_group is not defined, it would be created implicitly with access 0.0.0.0/0
Assets 2
Loading