Security group should not allow 0.0.0.0/0 ingress on SSH (port 22) or RDP (port 3389)

What it checks

Security group: ingress allows 0.0.0.0/0 on SSH (22) or RDP (3389).

Where it applies

Terraform: aws_security_group, aws_security_group_rule

CloudFormation: AWS::EC2::SecurityGroup

How to fix it

1. Remove the 0.0.0.0/0 ingress rule for ports 22/3389
2. Replace with SSM Session Manager (no inbound port needed) or a bastion host with restricted SG

Frameworks

• AWS FSBP EC2.13
• AWS FSBP EC2.14
• SOC 2 CC6.1
• SOC 2 CC6.6
• SOC 2 CC6.3
• PCI-DSS v4.0.1/1.3.1
• HIPAA 164.312(a)(1)

These mappings are advisory, not an attestation of compliance.

Vendor documentation

All rules