Excessive Security Lists
Determine if there are an excessive number of security lists in the account
Keeping the number of security lists to a minimum helps reduce the attack surface of an account. Rather than creating new groups with the same rules for each project, common rules should be grouped under the same security lists. For example, instead of adding port 22 from a known IP to every group, create a single “SSH” security group which can be used on multiple instances.
Recommended Actions
Follow the appropriate remediation steps below to resolve the issue.
-
Log in to the Google Oracle Platform Console.
-
Scroll down the left navigation panel and choose the “Virtual Cloud Networks” under the “Networking.”
-
On the “Virtual Cloud Networks” page, click on the “Name” as a link to access the “Virtual Network.”
-
On the “Virtual Cloud Network Details” page, scroll down the left navigation panel and choose the “Security Lists” option under the “Resources.”
-
On the “Security Lists” page, check the number of “Security Lists” and check if multiple security list is serving the same traffic rules by clicking on the “Name” as a link.
-
Repeat steps number 2 - 5 to determine if there are an excessive number of security lists in the account which serves the same traffic rules.
-
Navigate to “Virtual Cloud Networks” under the “Networking”, click on the “Name” as a link to access the “Virtual Network”, select the “Security List” which needs to be removed.
-
Click on the 3 vertical dots at the extreme right of the screen to open the “Options” window of the selected “Security List.”
-
Click on the “Terminate” at the bottom of the “Options” window and click on the “Yes” button at the “Terminate Security List” tab.
-
Repeat steps number 7 - 9 to limit the number of security lists to prevent accidental authorizations.