...
Description: This controls ensures that no security group allows ingress from 0.0.0.0/0 to port 22. Security groups provide stateful filtering ingress/egress network traffic to AWS resources. It is recommended that no security group allows unrestricted ingress access to port 22.
...