Amazon EC2 Security Best Practice

Amazon EC2

Amazon Elastic Compute Cloud (Amazon EC2) is a web service that provides secure, resizable compute capacity in the cloud. It is designed to make web-scale cloud computing easier for developers. Amazon EC2’s simple web service interface allows you to obtain and configure capacity with minimal friction. It provides you with complete control of your computing resources and lets you run on Amazon’s proven computing environment.

SSH Open to the Internet

Ensure that SSH is not allowing ingress to instances from 0.0.0.0/0.

RDP Open to the Internet

Ensure that RDP is not allowing ingress to instances from 0.0.0.0/0.

NetBIOS Open to the Internet

Ensure that NetBIOS is not allowing ingress to instances from 0.0.0.0/0.

CIFS/SMB Open to the Internet

Ensure that CIFS/SMB is not allowing ingress to instances from 0.0.0.0/0.

MSSQL Open to the Internet

Ensure that MSSQL is not allowing ingress to instances from 0.0.0.0/0.

Oracle Open to the Internet

Ensure that Oracle is not allowing ingress to instances from 0.0.0.0/0.

MySQL Open to the Internet

Ensure that MySQL is not allowing ingress to instances from 0.0.0.0/0.

PostgreSQL Open to the Internet

Ensure that PostgreSQL is not allowing ingress to instances from 0.0.0.0/0.

VNC Open to the Internet

Ensure that VNC is not allowing ingress to instances from 0.0.0.0/0.

Sybase Open to the Internet

Ensure that Sybase is not allowing ingress to instances from 0.0.0.0/0.

Casandra Open to the Internet

Ensure that Casandra is not allowing ingress to instances from 0.0.0.0/0.

MongoDB Open to the Internet

Ensure that MongoDB is not allowing ingress to instances from 0.0.0.0/0.

LDAP Open to the Internet

Ensure that LDAP is not allowing ingress to instances from 0.0.0.0/0.

LDAPS Open to the Internet

Ensure that LDAPS is not allowing ingress to instances from 0.0.0.0/0.

WinRM Open to the Internet

Ensure that WinRM is not allowing ingress to instances from 0.0.0.0/0.

Redis Open to the Internet

Ensure that Redis is not allowing ingress to instances from 0.0.0.0/0.

DNS Open to the Internet

Ensure that DNS is not allowing ingress to instances from 0.0.0.0/0.

DOCKER Open to the Internet

Ensure that DOCKER is not allowing ingress to instances from 0.0.0.0/0.

Elasticsearch Open to the Internet

Ensure that Elasticsearch is not allowing ingress to instances from 0.0.0.0/0.

FTP Open to the Internet

Ensure that FTP is not allowing ingress to instances from 0.0.0.0/0.

HDFS Open to the Internet

Ensure that HDFS is not allowing ingress to instances from 0.0.0.0/0.

Hadoop Open to the Internet

Ensure that Hadoop is not allowing ingress to instances from 0.0.0.0/0.

Kibana Open to the Internet

Ensure that Kibana is not allowing ingress to instances from 0.0.0.0/0.

VNC Server Open to the Internet

Ensure that VNC Server is not allowing ingress to instances from 0.0.0.0/0.

Sensitive Data in UserData

Ensure sensitive information is not in plain text in user data.

View the Online Demo!

Are you curious as to what type of data Intelligent Discovery collects in relation to AWS vulnerabilities?
Login into our on-line demo to see a simulated view of what Intelligent Discovery collects and explains how to remediate.
demo.intelligentdiscovery.io

Other Key Features

Inventory

Consolidate your inventory management with consistent and frequent security logs, inventories, and change logs. Dashboard reporting for extensive analytical value.

learn more +

Cost & Usage

Access consolidated capacity, cost, and volume tools in a scaling environment without impacting production or breaking the bank.