AWS Security Group allows all traffic on SSH port (22) misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AWS_24
Category - Subcategory	Public Exposure - Sensitive Ports
Provider	AWS
Severity	LOW
Framework	CloudFormation, Serverless, Terraform, Terraform Plan
Mapped CSPM/KSPM Rule	62c42bbc-1764-408f-814c-68d2b392af1f

Impact

Security groups are stateful and provide filtering of ingress/egress network traffic to AWS resources. We recommend that security groups do not allow unrestricted ingress access to port 22. Removing unfettered connectivity to remote console services, such as SSH, reduces a server's exposure to risk.

How to Fix

Resource: AWS::EC2::SecurityGroup

• Arguments: Properties.SecurityGroupIngress [source,go]

---

Type: AWS::EC2::SecurityGroup Properties: ... SecurityGroupIngress:

• Description: SSH Ingress IpProtocol: tcp FromPort: 22 ToPort: 22
• CidrIp: "0.0.0.0/0"
• CidrIp: "10.10.10.0/24"

---