Ensure no VPC security groups allow ingress from 0.0.0.0/0 to port 22

So wird geprüft

Prüfmethode: Manuelle Prüfung

Diese Empfehlung kann nicht automatisch geprüft werden. Ein Scan führt sie mit diesen Anweisungen auf, wenn Sie --include-manual übergeben.

Perform the following tasks to determine if the account is configured as prescribed: Using Console: 1. Login to the IBM Cloud Portal at https://cloud.ibm.com. 2. At the Menu icon, select Infrastructure, Network, Security Groups. 3. For each security group, perform the following: a. Select the security group name. b. Ensure no Inbound Rule exists that has a value that includes port 22 and has a Source of 0.0.0.0/0. Note that a port range value of ANY or a port range that includes port 22, e.g. 0-1024, are inclusive of port 22.

So wird behoben

Behebungsmethode: Anleitung oder Infrastruktur-Patch

Using Console: 1. Login to the IBM Cloud Portal at https://cloud.ibm.com. 2. At the Menu icon, select Infrastructure, Network, Security Groups. 3. For each security group, perform the following: a. Select the security group name. b. Identify the Inbound rule to be removed. c. Using the Options icon, select Delete.