---
names:
  full: AWS EC2 Security Group allows unrestricted traffic to all ports
  contextual: Security Group allows unrestricted traffic to all ports
description: >
  Ensure that AWS EC2 Security Groups are configured to avoid unrestricted 
  traffic to all ports. This involves reviewing and limiting overly permissive 
  inbound rules that expose all ports (0-65535) to unrestricted IP ranges (0.0.0.0/0).
type: "COMPLIANCE_POLICY"
categories:
  - "SECURITY"
frameworkMappings:
  - "/frameworks/iso-iec-27001-2013/09/01/02"
  - "/frameworks/pci-dss-v4.0.1/01/02/01"
  - "/frameworks/pci-dss-v4.0.1/01/02/05"
  - "/frameworks/pci-dss-v4.0.1/01/02/06"
  - "/frameworks/pci-dss-v4.0.1/01/03/01"
  - "/frameworks/pci-dss-v4.0.1/01/03/02"
  - "/frameworks/cloudaware/resource-security/network-exposure"
similarPolicies:
  internal:
    - dec-x-3e95721c