Security policies
As we said earlier in this chapter, it is important to review industry-standard security benchmarks such as CIS Amazon Web Services, CIS Microsoft Azure Benchmarks, and CIS Google Cloud Platform Benchmarks to understand best practices around security policies when configuring virtual networks. At the time of writing, the benchmarks from the Center for Internet Security can be found at https://www.cisecurity.org/cis-benchmarks.
For each benchmark, we will look at the recommendations around the networking policies.
Amazon Virtual Private Cloud
The following security policies related to networking in the CIS Amazon Web Services are recommended:
- 5.1 Ensure no network ACLs allow ingress from 0.0.0.0/0 to remote server administration ports
- 5.2 Ensure no security groups allow ingress from 0.0.0.0/0 to remote server administration ports
- 5.3 Ensure the default security group of every VPC restricts all traffic
- 5.4 Ensure routing tables for VPC peering...
