A security group controls which network traffic may enter or leave a resource.
A good bouncer checks:
Who are you?
Where are you coming from?
Which door are you trying to use?
A bad bouncer sees 0.0.0.0/0 and says, “Everybody is welcome.”
Open only the ports your system requires and restrict access to trusted sources wherever possible.
Your database probably does not need to introduce itself to the entire internet.
Top comments (0)