High55OpenDRIFT-b80f6119

aws_security_group.web

dev · us-east-2 · acct 376634957118 · detected 11d ago · confirmed by 60 scans

Someone opened SSH (port 22) inbound access to the entire internet on this security group.

confirmedinferred

Public exposure introduced — a rule now allows traffic from 0.0.0.0/0

ingress[0]modified

from_port443→22

to_port443→22

cidr_blocks10.0.0.0/8→0.0.0.0/0public

descriptionHTTPS from the internal network→

ingress[1]added

protocol+ tcp

from_port+ 443

to_port+ 443

cidr_blocks+ 10.0.0.0/8

self+ false

description+ HTTPS from the internal network

Select an event in Drift Replay to inspect its evidence here.

Actor unknown

No CloudTrail event matched this change inside the drift window. Reported honestly — PlumbLine never guesses an actor.

Used by — 1 dependent

Terraform configuration references and depends_on only; not a complete AWS blast-radius analysis.