Audits AWS security groups to identify overly permissive rules and improve network security posture.
The AWS Security Group Analyzer is a specialized tool designed to evaluate and harden your AWS network security by scanning for vulnerabilities in EC2 security groups. It helps engineers identify high-risk configurations—such as SSH, RDP, or database ports open to the public internet (0.0.0.0/0)—and provides actionable AWS CLI commands to restrict access based on the principle of least privilege. Whether you are performing a routine security audit, cleaning up unused resources, or implementing a multi-tier architecture, this skill streamlines the process of securing your cloud infrastructure through automated checks and guided remediation patterns.
主要功能
01Identifies unused security groups to reduce attack surface and clutter
0219 GitHub stars
03Generates remediation commands for revoking and authorizing rules
04Provides infrastructure patterns for secure Web, App, and DB tiers
05Detects high-risk ports open to the public internet (0.0.0.0/0)
06Evaluates egress rules to prevent unauthorized outbound traffic
使用场景
01Conducting automated security audits for AWS compliance and best practices
02Identifying and removing stale security groups after infrastructure migrations
03Restricting database access to specific application security groups instead of CIDR blocks
