A Config rule that checks whether security groups in use do not allow restricted incoming TCP traffic to the specified ports. This rule applies only to IPv4.

This config rule supports the following parameters:

  • blockedPort1
    • Required: No
    • Type: int
    • Description:Blocked TCP port number. The default of 20 corresponds to File Transfer Protocol (FTP) Data Transfer.
    • Default Value: 20
  • blockedPort2
    • Required: No
    • Type: int
    • Description:Blocked TCP port number. The default of 21 corresponds to File Transfer Protocol (FTP) Command Control.
    • Default Value: 21
  • blockedPort3
    • Required: No
    • Type: int
    • Description:Blocked TCP port number. The default of 3389 corresponds to Remote Desktop Protocol (RDP).
    • Default Value: 3389
  • blockedPort4
    • Required: No
    • Type: int
    • Description:Blocked TCP port number. The default of 3306 corresponds to MySQL protocol.
    • Default Value: 3306
  • blockedPort5
    • Required: No
    • Type: int
    • Description:Blocked TCP port number. The default of 4333 corresponds to MySQL protocol.
    • Default Value: 4333

ConfigRule
AWS::Config::ConfigRule


Scope

ComplianceResourceTypes

Source *
CustomPolicyDetails
SourceDetails

CloudFormation Template

Share Template