CODEWITHSUNDEEP
securityamazon-ec2amazon-web-services
AnonForGoodReason
AnonForGoodReason

Reputation: 21

Block outbound traffic on EC2

Is ther a way to configure EC2 Security Groups so that they do not allow specific types of outbound connectivity (such as making HTTP requests to the public internet)?

Upvotes: 2

Views: 1718

Answers (2)

Adrian Lynch
Adrian Lynch

Reputation: 8494

Security Groups only let you specify allow rules.

To achieve what you're after you would remove the default All traffic/All protocols/All ports/0.0.0.0/0 rule.

This will effectively stop all outbound connections.

If you encounter issues with connectivity after this, add rules to explicitly allow what's needed.

Upvotes: 0

mway
mway

Reputation: 4392

I don't believe so, no. You may have better luck on ServerFault, though.

AFAIK, EC2 security groups are only for accessing the server (eg, keypairs); any internal connectivity would probably have to be regulated through iptables.

Upvotes: 1

Related Questions