Digital Cloud Training’s Post

Transcript

And this hands on lesson, we're going to create an AWS config rule that looks for any security group rules that allow access from any source address to port numbers other than port 80. Port 80 is fine. Obviously we want people to be able to connect to our websites from the Internet, but otherwise we're wide open. So that's might, that might be something that we want from a compliance perspective to restrict. So what we'll do is have config. Looking for compliant and noncompliant resources and then SSM automation. So Systems Manager Automation will be used to remediate any noncompliant resources in the course download. In the AWS config directory, we have this config rule of remediation document. And so here we've got the general process of what we're going to do. Firstly, we'll create an IAM role for Systems Manager and it's going to have this policy attached to it. We'll also add an inline policy with the code. From this document Automation IAM role dot JSON Then we'll create a config rule using one of the managed rules in AWS Config and use port 80 as the authorized TCP port. Then we'll add the remediation configuration. So let's go and get started.