A firewall rule allows traffic from/to the public internet
Opening up ports to the public internet is generally to be avoided. You should restrict access to IP addresses or ranges that explicitly require it where possible.
Impact
Exposure of infrastructure to the public internet
Recommended Actions
Follow the appropriate remediation steps below to resolve the issue.
Employ more restrictive firewall rules
1
2
3
4
5
6
7
8
9
10
11
resource"openstack_fw_rule_v1" "rule_1" {
name="my_rule" description="don't let just anyone in" action="allow" protocol="tcp" destination_ip_address="10.10.10.1" source_ip_address="10.10.10.2" destination_port="22" enabled="true"
}