HIGH
Source
CloudSploit
ID
open-https

Open HTTPS

Determine if TCP port 443 for HTTPS is open to the public

Network security groups should be periodically evaluated for port misconfigurations. Where certain ports and protocols may be exposed to the Internet, they should be evaluated for necessity and restricted wherever they are not explicitly required and narrowly configured.

Restrict TCP port 443 to known IP addresses.