Query: 4.3 Ensure no security groups allow ingress from 0.0.0.0/0 to port 22

Description

Security groups provide stateful filtering of ingress/egress network traffic to Alibaba Cloud resources. It is recommended that no security group allows unrestricted ingress access to port 22.

Query

Tables used in this query:

• alicloud_ecs_security_group

Controls using this query:

• 4.3 Ensure no security groups allow ingress from 0.0.0.0/0 to port 22
• 4.3 Ensure no security groups allow ingress from 0.0.0.0/0 to port 22

SQL