Ensure no VPC security groups allow ingress from 0.0.0.0/0 to port 22

Nasıl denetlenir

Denetim yöntemi: Manuel inceleme

Bu öneri otomatik olarak denetlenemez. --include-manual parametresini verdiğinizde tarama bunu bu talimatlarla birlikte listeler.

Perform the following tasks to determine if the account is configured as prescribed: Using Console: 1. Login to the IBM Cloud Portal at https://cloud.ibm.com. 2. At the Menu icon, select Infrastructure, Network, Security Groups. 3. For each security group, perform the following: a. Select the security group name. b. Ensure no Inbound Rule exists that has a value that includes port 22 and has a Source of 0.0.0.0/0. Note that a port range value of ANY or a port range that includes port 22, e.g. 0-1024, are inclusive of port 22.

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

Using Console: 1. Login to the IBM Cloud Portal at https://cloud.ibm.com. 2. At the Menu icon, select Infrastructure, Network, Security Groups. 3. For each security group, perform the following: a. Select the security group name. b. Identify the Inbound rule to be removed. c. Using the Options icon, select Delete.