Publicly accessible EC2 instance should not have open administrative ports

Docs > Plateforme de sécurité Datadog > OOTB Rules > Publicly accessible EC2 instance should not have open administrative ports

Cette page n'est pas encore disponible en français, sa traduction est en cours.
Si vous avez des questions ou des retours sur notre projet de traduction actuel, n'hésitez pas à nous contacter.

Description

This rule checks if an EC2 instance accessible from the public internet has open administrative ports, specifically port 22 (SSH) and port 3389 (RDP). Having these ports open poses a security risk as it can expose the instance to unauthorized access.

Remediation

To remediate this issue, Datadog recommends restricting access to administrative ports (22 for SSH and 3389 for RDP) on your EC2 instances by configuring your security groups to allow connections only from trusted IP addresses. For detailed guidance, see the AWS Security Group documentation, Amazon EC2 Security Groups for Linux Instances.