Aqua CSPM

Open Hadoop HDFS NameNode Metadata Service

Quick Info

Plugin TitleOpen Hadoop HDFS NameNode Metadata Service
CloudAWS
CategoryEC2
DescriptionDetermine if TCP port 8020 for HDFS NameNode metadata service is open to the public
More InfoWhile some ports such as HTTP and HTTPS are required to be open to the public to function properly, more sensitive services such as Hadoop/HDFS should be restricted to known IP addresses.
AWS Linkhttp://docs.aws.amazon.com/AWSEC2/latest/UserGuide/authorizing-access-to-an-instance.html
Recommended ActionRestrict TCP port 8020 to known IP addresses for Hadoop/HDFS

Detailed Remediation Steps