Publicly accessible EC2 instance should not have open administrative ports

문서 > Datadog 보안 > OOTB Rules > Publicly accessible EC2 instance should not have open administrative ports

이 페이지는 아직 영어로 제공되지 않습니다. 번역 작업 중입니다.
현재 번역 프로젝트에 대한 질문이나 피드백이 있으신 경우 언제든지 연락주시기 바랍니다.

Description

This rule checks if an EC2 instance accessible from the public internet has open administrative ports, specifically port 22 (SSH) and port 3389 (RDP). Having these ports open poses a security risk as it can expose the instance to unauthorized access.

Remediation

To remediate this issue, Datadog recommends restricting access to administrative ports (22 for SSH and 3389 for RDP) on your EC2 instances by configuring your security groups to allow connections only from trusted IP addresses. For detailed guidance, see the AWS Security Group documentation, Amazon EC2 Security Groups for Linux Instances.