Security group opens SQL Server Browser (UDP 1434) to the IPv6 internet

What it checks

Security group: ingress allows ::/0 on UDP 1434, the SQL Server Browser service.

Where it applies

Terraform: aws_security_group, aws_security_group_rule

CloudFormation: AWS::EC2::SecurityGroup

How to fix it

1. Replace ::/0 in ipv6_cidr_blocks with a specific prefix, or drop the UDP 1434 rule if the Browser service is not needed.

Frameworks

• AWS FSBP EC2.19
• SOC 2 CC6.6
• HIPAA 164.312(a)(1)

These mappings are advisory, not an attestation of compliance.

Vendor documentation

All rules