Ensure that ECS security groups do not have all ports or protocols open to the public
Security groups should be created on a per-service basis and avoid allowing all ports or protocols.
Modify the security group to specify a specific port and protocol to allow.