Check your Amazon EC2 security groups for inbound rules that allow unrestricted access (i.e. 0.0.0.0/0 or ::/0) on TCP port 6379 in order to reduce the exposure to security risks and protect the Redis cache server instances associated with your security groups. Redis is an open-source, in-memory data structure store, used as a database, cache server, and message broker.
This rule can help you work with the AWS Well-Architected Framework.
This rule resolution is part of the Conformity Security & Compliance tool for AWS.
Allowing unrestricted inbound/ingress access on TCP port 6379 (Redis) to your Amazon EC2 instances can increase opportunities for malicious activities such as cross-site scripting, remote code executions, brute-force, and cryptojacking attacks (e.g. RedisWannaMine attacks). The associated security groups should be configured so that the communication to specific resources is restricted to only those hosts or networks that have a legitimate requirement for access.
Audit
To determine if your Amazon EC2 security groups allow unrestricted Redis access, perform the following operations:
Remediation / Resolution
To update the inbound rule configuration for your Amazon EC2 security groups in order to restrict Redis Cache access to trusted entities only (i.e. authorized IP addresses and IP ranges, or other security groups), perform the following operations:
References
- AWS Documentation
- Amazon EC2 security groups for Linux instances
- Work with security groups
- Security group rules for different use cases
- Authorize inbound traffic for your Linux instances
- AWS Command Line Interface (CLI) Documentation
- ec2
- describe-security-groups
- revoke-security-group-ingress
- authorize-security-group-ingress
- Redis Documentation
- Redis
Unlock the Remediation Steps
Free 30-day Trial
Automatically audit your configurations with Conformity
and gain access to our cloud security platform.
![Confirmity Cloud Platform](/cloudoneconformity/assets/v2/images/common/conformity-platform-cloud.png)
You are auditing:
Check for Unrestricted Redis Access
Risk Level: Very High