Security group contains a redundant CIDR rule

What this check finds

The CIDR in the Security Group cannot be blocked, so including it is not necessary.

Passing looks like: No unneeded security group CIDRs.

How to fix it

Remove the unneeded CIDR rule from the Security Group inbound rules.

Compliance controls it is evidence for

A failing result counts against these controls in KloudLytics; a passing one is evidence towards them. How compliance mapping works

Checked on every scan

KloudLytics runs this check each time it scans a connected AWS account, through a read-only role, and lists every affected resource with its region. On Pro and Business a fix is written for the specific resource rather than the general case above. The exact access it needs

More Security groups checks

• CriticalSecurity group has critical port open to the internet
• HighDefault VPC security group allows unrestricted traffic
• LowSecurity group has overlapping CIDR rules
• InfoSecurity Group CIDR contains large IP range
• InfoSecurity group CIDR is formatted unexpectedly

All Security groups checks