HIGH
Source
CloudSploit
ID
open-elasticsearch

Open Elasticsearch

Determines if TCP ports 9200, 9300 for Elasticsearch are open to the public

Databases are the placeholders for most sensitive and confidential information in an organization. Allowing Inbound traffic from external IPv4 addresses to the database ports can lead to attacks like DoS, Brute Force, Smurf and reconnaissance. It is a best practice to block public access, and restrict the Inbound traffic from specific addresses and make the connection secure.

Restrict TCP ports 9200, 9300 to known IP addresses.