MEDIUM
Source
CloudSploit
ID
airflow-web-server-public-access

Airflow Web Server Public Access

Ensure Composer Airflow web server is not open to the world

Allowing access from all IP addresses on the Internet to Composer Environments is risky as it can lead to Brute Force or DoS attacks. As a security best practice, only allow access from required IP ranges.

Ensure that all composer environments have private airflow web servers