Skip to main content

💼 5 Networking

  • Contextual name: 💼 5 Networking
  • ID: /frameworks/cis-aws-v5.0.0/05
  • Located in: 💼 CIS AWS v5.0.0

Description​

This section contains recommendations for AWS networking configuration.

Similar​

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags
💼 5.1 Elastic Compute Cloud (EC2)2
    💼 5.1.1 Ensure EBS volume encryption is enabled in all regions (Automated)1
    💼 5.1.2 Ensure CIFS access is restricted to trusted networks to prevent unauthorized access (Automated)1
💼 5.2 Ensure no Network ACLs allow ingress from 0.0.0.0/0 to remote server administration ports (Automated)1
💼 5.3 Ensure no security groups allow ingress from 0.0.0.0/0 to remote server administration ports (Automated)1
💼 5.4 Ensure no security groups allow ingress from ::/0 to remote server administration ports (Automated)1
💼 5.5 Ensure the default security group of every VPC restricts all traffic (Automated)1
💼 5.6 Ensure routing tables for VPC peering are "least access" (Manual)1
💼 5.7 Ensure that the EC2 Metadata Service only allows IMDSv2 (Automated)1