SH403: Security group open to the internet¶

Severity: high · Category: security · Applies to: cloudformation, terraform

Why it matters¶

Ingress from 0.0.0.0/0 to SSH, RDP, databases or every port exposes those services to constant scanning and brute-force attempts.

Restrict the source to your own CIDR range or a security group, and use SSM Session Manager or a VPN instead of public SSH.

Skip it everywhere in devshield.yml:

ignore:
  - SH403

Or skip one line with a comment on that line or the line above:

devshield-ignore: SH403