Page Comparison

...

1. Login to the AWS Management Console at https://console.aws.amazon.com.

2. Navigate to VPC console.

3. In the left pane, click Security Groups.

4. Select the security group reported.

5. Click the Inbound Rules tab.

6. Click Edit rules.

7. Identify the rules to be removed.

8. Click the x in the Remove column.

9. Click Save rules.

Important:

Remediating may result in user losing SSH access, whose IP is not whitelisted in rules.

Reference:

• CIS reference: CIS Amazon Web Services Foundations Benchmark v1.3.0 - 08-07-2020: Recommendation #5.2 (check 1)

• https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-network-security.html#deleting-security-group-rule

...