Ensure that security groups does not have UDP port 445 for CIFS open to the public.
While some ports such as HTTP and HTTPS are required to be open to the public to function properly, more sensitive services such as CIFS should be restricted to known IP addresses.
Restrict UDP port 445 for CIFS to known IP addresses