A Security Engineer Discovers That Developers Have Been Adding Rules

A Security Engineer discovers that developers have been adding rules to security groups that allow SSH and RDP traffic from 0.0.0.0/0 instead of the organization firewall IP. What is the most efficient way to remediate the risk of this activity?

A) Delete the internet gateway associated with the VPC.
B) Use network access control lists to block source IP addresses matching 0.0.0.0/0.
C) Use a host-based firewall to prevent access from all but the organization's firewall IP.
D) Use AWS Config rules to detect 0.0.0.0/0 and invoke an AWS Lambda function to update the security group with the organization's firewall IP.

Correct Answer:

Verified

Unlock this answer now
Get Access to more Verified Answers free of charge

Access For Free