AWS EKS node group have implicit SSH access from 0.0.0.0/0 misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AWS_100
Category - Subcategory	Kubernetes - Access Control
Provider	AWS
Severity	HIGH
Framework	CloudFormation, Serverless, Terraform, Terraform Plan

Impact

It is generally a good security practice to ensure that your AWS EKS node group does not have implicit SSH access from 0.0.0.0/0, as this means that it is not accessible over the internet via SSH. This can help to protect your EKS node group from unauthorized access, as external parties will not be able to connect to it over the internet.

How to Fix

[source,go]

Resources: Nodegroup Type: 'AWS::EKS::Nodegroup' Properties: ... RemoteAccess: Ec2SshKey:

• SourceSecurityGroups:
• • ...

Nodegroup2: Type: 'AWS::EKS::Nodegroup' Properties: ...

• RemoteAccess:
• ...

---