via @dotnet : Announcing the .NET Security Group

https://ift.tt/V3SJ8gW
#DotNet #SecurityGroup #Microsoft #OpenSource #VulnerabilityManagement #CVE #PatchTuesday #CyberSecurity #SoftwareDevelopment #TechNews #Collaboration #SecurityUpdates #DotNetEcosystem #Trus…

プレフィックスリストを用いてセキュリティグループを設定してみる
https://dev.classmethod.jp/articles/sg-prefix-list-managed-custom/

#dev_classmethod #SecurityGroup #VPC #managed_prefix_lists #AWS

EC2やセキュリティグループを削除せずに非表示にする方法はありますか
https://dev.classmethod.jp/articles/tsnote-ec2-securitygroup-hidden-tag/

#dev_classmethod #SecurityGroup #AWS #Amazon_EC2 #Amazon_VPC

セキュリティグループの接続のトラブルを解決する (毎回マイ IP が変わる場合のセキュリティグループ設定について)
https://dev.classmethod.jp/articles/connection-ec2-problem-solution-for-security-group-jp/

#dev_classmethod #Classmethod_Thailand #Amazon_EC2 #SecurityGroup #AWS

[アップデート] セキュリティグループを別の VPC で使えるようになりました
https://dev.classmethod.jp/articles/securitygroup-other-vpc-associate/

#dev_classmethod #SecurityGroup #VPC #AWS

特定ポートを許可したセキュリティグループがNLB/ALBにアタッチされたことを検知するAWS Config カスタム Lambda ルールを作成してみた
https://dev.classmethod.jp/articles/config-custom-rule-nlb-alb-security-group-port/

#dev_classmethod #AWS #AWS_Config #SecurityGroup

AWSネットワークリソースの設定変更を Microsoft Teamsで複数ユーザーにメンション通知できるようにしてみた
https://dev.classmethod.jp/articles/sg-change-notify-teams-multi-user-mention-notification/

#dev_classmethod #AWS #Amazon_EventBridge #AWS_Lambda #Microsoft_Teams #AWS_CloudFormation #SecurityGroup

TerraformとCloudFormationを使用してセキュリティグループ間のトラフィックを許可する方法
https://qiita.com/S_Hassan/items/79d4e9915a352318667b?utm_campaign=popular_items&utm_medium=feed&utm_source=popular_items

#qiita #AWS #CloudFormation #SecurityGroup #Terraform

I'm perpetually confused by #aws security groups, which act both as access control rules *and* an identifier for a source of traffic.

For example, you can attach multiple security group to a load balancer, and my understanding is that the result is the union of the permissions.

But when you want to permit traffic from that load balancer to your instance, the load balancer's #SecurityGroup is the "source" for a rule in the instance security group.

But if the load balancer has three groups A, B, and C, are any of them usable as the source? My reading of https://docs.aws.amazon.com/vpc/latest/userguide/security-group-rules.html#security-group-referencing suggests "yes" -- any resource associated with the source security group can use that rule.

The pictures in the documentation look all nice and neat and hierarchal, when in real life it seems it is always a horrible mess, particularly when you let Kubernetes start creating things for you.

I think the thing that is more surprising to me is that the security group view does not give you any way of finding what is in it! You have to go to the "network interfaces" tab and filter by service group there, then look at the descriptions of each to see what it belongs to.

(So the real members of a security group are network interfaces? I'm pretty sure you can set up different ENIs attached to the same instance in different security groups, but that seems glossed over a lot in the UI.)

Frankly, I think this is an incredible muddle and I'm wondering if other cloud providers do better.