Aqua CSPM

Open RFC 1918

Quick Info

Plugin TitleOpen RFC 1918
CloudAWS
CategoryEC2
DescriptionEnsures EC2 security groups are configured to deny inbound traffic from RFC-1918 CIDRs
More InfoRFC-1918 IP addresses are considered reserved private addresses and should not be used in security groups.
AWS Linkhttps://docs.aws.amazon.com/vpc/latest/userguide/VPC_Subnets.html
Recommended ActionModify the security group to deny private reserved addresses for inbound traffic

Detailed Remediation Steps