AWS > EC2 >

EC2 LaunchWizard Security Groups

LOW

Source

CloudSploit

ec2-launchwizard-security-groups

management console

EC2 LaunchWizard Security Groups

Ensures security groups created by the EC2 launch wizard are not used

The EC2 launch wizard frequently creates insecure security groups that are exposed publicly. These groups should not be used and custom security groups should be created instead.

Recommended Actions

Delete the launch wizard security group and replace it with a custom security group.

Links

https://docs.aws.amazon.com/launchwizard/latest/userguide/launch-wizard-sap-security-groups.html

Aqua Container Security

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.