Re:I discovered thousands of open databases on AWS
by samstave on Monday January 31, 2022 @11:00AM
(#30149467)
I mean, especially on AWS, controlling access to 3306 is dead simple. and literally the one thing that anyone running a DB (which should be everyone) does to ensure that only certain machines, vlans etc can talk to 3306 on said DB instances...
Like literally ONLY this internal IP is allowed to contact the DB.
Also. as far back as 2014 we had AWS scanning all our machines constantly for open ports and alerts on such - we had to get an approval from within AWS to continue to portscan our own machines... they were pretty on top of port scanning behavior...
and I am surprised that the stance they take hasnt improved in all these years.
Like literally ONLY this internal IP is allowed to contact the DB.
Also. as far back as 2014 we had AWS scanning all our machines constantly for open ports and alerts on such - we had to get an approval from within AWS to continue to portscan our own machines... they were pretty on top of port scanning behavior...
and I am surprised that the stance they take hasnt improved in all these years.