News for hackers. Stuff that matters.

A comment on I discovered thousands of open databases on AWS. Parent comment

Re:I discovered thousands of open databases on AWS by insaneworld on Tuesday March 15, 2022 @04:47AM (#30683011)
isn't it a standard practice to keep databases in private subnet or behind security groups?

I even follow this standard rule for pet projects

[ Parent | on HN ]
Re:I discovered thousands of open databases on AWS by vladvasiliu on Tuesday March 15, 2022 @05:29AM (#30683280)
I'm pretty sure that if you have no security group attached to an instance no traffic is allowed. And a new security group doesn't allow traffic from "everywhere" by default. You have to actively allow that.
[ Parent | on HN ]