SSH access to an EC2 instance must be limited to an administrator network.
The team is assigning ownership for the virtual network rule.
Which setting is managed by the customer?
Security groups are customer-configured virtual firewalls that control allowed traffic to resources such as EC2 instances.
Detailed explanation
AWS operates the physical network infrastructure.
AWS operates the physical network infrastructure.
The customer configures security-group rules to allow only the required source and port.
The customer configures security-group rules to allow only the required source and port.
The hypervisor is part of the AWS infrastructure layer.
The hypervisor is part of the AWS infrastructure layer.
Physical perimeter protection is handled by AWS.
Physical perimeter protection is handled by AWS.
Check official documentation
Compare the following points with the official documentation.
Amazon EC2 User GuideのSecurity groupsとAWS Shared Responsibility Modelを確認する。
What to confirm
セキュリティグループのルールは利用者が設定する。
Key points
- Security group
- Inbound rule
- Virtual firewall
Notes
- Environment: AWS公式ドキュメントのEC2ネットワーク設定確認
- Confirm the service-specific responsibility boundary in the current AWS documentation.
Foundation review
Virtual control
Customers configure security-group rules to express the required traffic boundary.
Least exposure
Administrative ports should be limited to the necessary sources.