Ensure no VPC security groups allow ingress from 0.0.0.0/0 to port 22

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

Perform the following tasks to determine if the account is configured as prescribed: Using Console: 1. Login to the IBM Cloud Portal at https://cloud.ibm.com. 2. At the Menu icon, select Infrastructure, Network, Security Groups. 3. For each security group, perform the following: a. Select the security group name. b. Ensure no Inbound Rule exists that has a value that includes port 22 and has a Source of 0.0.0.0/0. Note that a port range value of ANY or a port range that includes port 22, e.g. 0-1024, are inclusive of port 22.

How it is fixed

Fix method: Guidance or infrastructure patch

Using Console: 1. Login to the IBM Cloud Portal at https://cloud.ibm.com. 2. At the Menu icon, select Infrastructure, Network, Security Groups. 3. For each security group, perform the following: a. Select the security group name. b. Identify the Inbound rule to be removed. c. Using the Options icon, select Delete.