Medium45ResolvedDRIFT-4e8203ae

aws_security_group.web

dev · us-east-2 · acct 376634957118 · detected 17d ago · confirmed by 1 scan

Someone opened SSH (port 22) inbound access to the entire internet on this security group.

confirmedinferred

Public exposure introduced — a rule now allows traffic from 0.0.0.0/0

ingress[0]modified

from_port443→22

to_port443→22

cidr_blocks10.0.0.0/8→0.0.0.0/0public

descriptionHTTPS from the internal network→

ingress[1]added

protocol+ tcp

from_port+ 443

to_port+ 443

cidr_blocks+ 10.0.0.0/8

self+ false

description+ HTTPS from the internal network

Select an event in Drift Replay to inspect its evidence here.

Likely actorHigh · 95%

arn:aws:iam::376634957118:root

Used by — 1 dependent

Terraform configuration references and depends_on only; not a complete AWS blast-radius analysis.