duo-labs / duo-labs/cloudmapper

Have public command show an RDS as public only when it's port is actually exposed

Open
#174 0 comments 0 reactions 0 assignees View on GitHub
public
Dominant language
JavaScript
Stars
6.3k
Forks
836
PR merge metrics
No merged PRs in 30d

Description

RDS's only listen on one port. You can apply a Security Group that makes it "public" on a different port that is not used. If that is the case, there should be a warning, but this should not be displayed as public. For example, postgress by default listens on 5432. If that RDS is "public" with only 80 open, then this should not show as being public.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.