AWS Security Group must not allow unrestricted outbound access

Tenacity Id

Risk Level

Categories

security-group-039

Last Updated:

April 21, 2022

To prevent data exfiltration in the event that a Nasdaq cloud resource is compromised, uncontrolled egress in Security Group rules (0.0.0.0/0) must not be allowed.