medium10 pts · first answer countscloud-securitynetwork-securityvpc
Referencing security groups
The database security group allows port 5432 from the app tier's subnet CIDR 10.0.1.0/24. A new batch server is placed in that subnet. What better rule limits access to app servers only?
Discussion 0
Join free to post in the discussion.
Related questions
- Who patches the VM operating system?Cloud Engineer
- Principle of least privilegeCloud Engineer
- Protecting the root userCloud Engineer
- What HTTPS protectsCloud Engineer
- Shell access without opening port 22Cloud Engineer
- IAM user vs IAM roleCloud Engineer
- Explicit deny always winsCloud Engineer
- Nothing allowed means deniedCloud Engineer