2 ms·
What’s the use case for exposing these services to anything outside a VPC? With a hardened bastion or a vpn endpoint, you can ensure only authorized users can a
by ec109685 5y ago
What’s the use case for exposing these services to anything outside a VPC? With a hardened bastion or a vpn endpoint, you can ensure only authorized users can access. A firewall rule of “any AWS IP seems horribly flawed”.
- Hikikomori 5y agoPeople that know things are unlikely to accidentally do this. Unfortunately AWS accounts come with default VPCs that only have a public subnet, so unless you know what you are doing you are likely launching all resources with a public IP and likely allowing too much in your SG.