restricted-common-ports - AWS Config
AWS CloudFormation template

restricted-common-ports

Checks if the security groups in use do not allow unrestricted incoming TCP traffic to the specified ports. The rule is COMPLIANT when the IP addresses for inbound TCP connections are restricted to the specified ports. This rule applies only to IPv4.

Identifier: RESTRICTED_INCOMING_TRAFFIC

Trigger type: Configuration changes

AWS Region: All supported AWS regions except Asia Pacific (Jakarta), Asia Pacific (Osaka), Europe (Milan), Africa (Cape Town) Region

Parameters:

blockedPort1 (Optional)
Type: int
Default: 20

Blocked TCP port number.

blockedPort2 (Optional)
Type: int
Default: 21

Blocked TCP port number.

blockedPort3 (Optional)
Type: int
Default: 3389

Blocked TCP port number.

blockedPort4 (Optional)
Type: int
Default: 3306

Blocked TCP port number.

blockedPort5 (Optional)
Type: int
Default: 4333

Blocked TCP port number.

AWS CloudFormation template

To create AWS Config managed rules with AWS CloudFormation templates, see Creating AWS Config Managed Rules With AWS CloudFormation Templates.