Determine if TCP port 443 for HTTPS is open to the public
Network security groups should be periodically evaluated for port misconfigurations. Where certain ports and protocols may be exposed to the Internet, they should be evaluated for necessity and restricted wherever they are not explicitly required and narrowly configured.
Restrict TCP port 443 to known IP addresses.