OCI security lists allows unrestricted ingress access to port 3389

Description

This policy identifies Security list that allow inbound traffic on RDP port (3389) from the public internet. As a best practice, restrict security groups to only allow permitted traffic and limit brute force attacks on your network.

Code Example

resource "oci_core_security_list" "pass0" {
    ...
    ingress_security_rules {
        ...
        source = "0.0.0.0/0"

        tcp_options {
            max = 4000
+            min = 3390
-            min = 3389
            ...
        }
    }
}

Remediation

Terraform

Rule Details

Field	Value
ID	IAC-1247
Severity	INFO
IaC Type	Terraform
Frameworks	Terraform
Checkov ID	CKV_OCI_20

References

• Checkov Rule

---