Security group opens SQL Server Browser (UDP 1434) to the internet
What it checks
Security group: ingress allows 0.0.0.0/0 on UDP 1434, the SQL Server Browser service.
Where it applies
Terraform: aws_security_group, aws_security_group_rule
CloudFormation: AWS::EC2::SecurityGroup
How to fix it
- Restrict UDP 1434 to the client CIDR, or remove the rule and connect on the instance's fixed TCP port directly.
Frameworks
- AWS FSBP EC2.19
- SOC 2 CC6.6
- HIPAA 164.312(a)(1)
These mappings are advisory, not an attestation of compliance.