AWS > MWAA >

Web Server Public Access

MEDIUM

Source

CloudSploit

web-server-public-access

management console

Web Server Public Access

Ensures web access to the Apache Airflow UI in your MWAA environment is not public.

To restrict access to the Apache Airflow UI, environment should be configured to be accessible only from within the VPC selected.

Recommended Actions

Modify Amazon MWAA environments to set web server access mode to be private only

Links

https://docs.aws.amazon.com/mwaa/latest/userguide/vpc-create.html

Aqua Container Security

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.