Reputation: 43
I'm wondering how do I create a policy that restricts users from creating a security group that allows all inbound traffic? Currently in the policy creation, AWS is asking for which service specifically, but I haven't found a service that targets vpc security groups specifically.
Anyone have any suggestions that point me in the right direction?
Thanks
Upvotes: 1
Views: 171
Reputation: 78573
To continuously audit and limit security groups across AWS accounts in an organization, use AWS Firewall Manager.
You can read more at the blog post announcing these features.
Upvotes: 1