Severity : null
Description : The default security list is often used for resources launched without a defined security list. For this reason, the default rules should be to block all traffic to prevent an accidental exposure.
Remediation Steps : Update the rules for the default security list to deny all traffic by default