Checks whether a specified high-risk port is added to a listener of a Server Load Balancer (SLB) instance. If not, the evaluation result is Compliant.
Scenarios
This rule applies when you need to add ports to a listener. We recommend that you disable unnecessary ports. This prevents your system from being exposed to high-risk networks.
Risk level
Default risk level: high.
When you apply this rule, you can change the risk level based on your business requirements.
Compliance evaluation logic
- If no specified high-risk port is added to a listener of an SLB instance, the evaluation result is Compliant.
- If a specified high-risk port is added to a listener of an SLB instance, the evaluation result is Incompliant. For more information about how to remediate an incompliant configuration, see Incompliance remediation.
Rule details
Item | Description |
---|---|
Rule name | slb-listener-risk-ports-check |
Rule identifier | slb-listener-risk-ports-check |
Tag | SLB and Listener |
Automatic remediation | Not supported |
Trigger type | Configuration change |
Supported resource type | SLB |
Input parameter | ports Note Separate multiple values with commas (,).
|
Incompliance remediation
Configure a listener for an SLB instance.
For more information, see Listener overview.