From the course: Complete Guide to AWS Security and Compliance Management

Unlock this course with a free trial

Join today to access over 25,300 courses taught by industry experts.

Resolving an Inspector finding

Resolving an Inspector finding

- [Facilitator] Now that we have a feel for the kind of things that Inspector can discover, let's go ahead and resolve one of those findings. Recall that we had a web server with an overly permissive security group. Let's go ahead and create a new security group that just allows HTTP and HTTPS access, then replace the security group on this instance. Under Network & Security, I click on the Security Groups link to open it in a new browser tab. Switching to that tab, I go ahead and click the Create security group button. The first thing I do is give the security group a name. I also give it a description. Then, I proceed to the Inbound rules section where I click Add rule. While I could simply type Port 80 into the Port range, I can conveniently use the Type dropdown to look for HTTP. Selecting that, I then proceed to the Source dropdown where I say Any IPv4. I'll add the same rule for IPv6. I'll go ahead and replicate that rule for IPv6. Now let's add HTTPS. Wonderful. That looks good…

Contents