Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [security-groups]

The tag has no usage guidance.

0
votes
2answers
65 views

Avoiding security groups in Windows domain with automated filesystem security

As far as I understand, best practices recommend that security groups are used with a Windows domain to assign permissions over files and folders. That is, you should create groups in Active Directory,...
2
votes
1answer
71 views

Limit public access to AWS ECS Fargate Service

I have a service on AWS ECS deployed using Fargate. This service uses a Network Load Balancer (NLB) to allow an Elastic IP to be associated with the service. This is not an http service and is using ...
1
vote
0answers
15 views

Editing Local Windows Built in Group: Network Operator

We need our local Built-in Group Network operator to be able to modify the speed ( aka Advanced TCP-IP setting) of the Windows 10 Network adapter but as per our test/research, this privilege is not ...
-1
votes
2answers
48 views

Why are primary network interfaces forced to inherit all the security groups of their EC2 instances?

I'm testing a virtual load balancer which is running on an EC2 instance. I'd like to be able to alter the setup and test the balancer under various conditions. In order to simulate a physical load ...
5
votes
3answers
467 views

AWS Security Group - how to allow Public IP from another Security Group

I have two instances in a VPC distinct security groups, each with their own public IP. I would like instance one to be able to connect to instance two on it's Public IP. I discovered that granting ...
9
votes
4answers
1k views

SSH between EC2 instances not permitted

I am setting up a few EC2 instances in a shared AWS account and want to give them access to each other. At the same time I want to prohibit access from other instances in the account. I created a ...
1
vote
1answer
31 views

How to connect to my server from AWS device farm when limiting the device farm ip range to 54.244.50.32/27?

We have a classic load balanser that's configured to allow TCP traffic on port 444. We have a security group configured that allows TCP traffic from 54.244.50.32/27. If we open up the traffic to the ...
1
vote
4answers
103 views

Do not show all docker containers to a particular user

I want to use one server to host multiple docker-containers. I want to give another user a possibility to manage new docker-containers, but I do not want to give him access to all other containers, ...
1
vote
1answer
22 views

Database Connections Persist After Security Group Change

We've set up a system to send a message to a queue in SQS when there's an outage on a dependency. In order to simulate an outage and test the system, I blocked the outbound port to a database on the ...
2
votes
2answers
248 views

Does it makes sense to configure iptables when you have configured AWS EC2 security groups?

We are using some Amazon EC2 instances with configured Security Groups (e.g. can SSH only from particular IPs -- sorry I cant post rules). Some time ago I checked iptables and it looked like there ...
0
votes
0answers
83 views

IIS on AWS Windows Server 2016 not serving to external clients

I created an AWS Windows Server 2016 instance and also allocated an elastic IP address to it. Server's running fine and I can RDP into it. I also installed IIS on it and ensured that it is running. ...
0
votes
1answer
158 views

AWS ALB security group allow connection from only my servers

I'm using an intenet-facing AWS ALB (Application Load Balancer) with a ECS cluster(docker), and I want to use it for forward web standard and internal web services traffic. The application load ...
0
votes
1answer
17 views

Issue connecting EC2 instances in 2 separate VPCs (same region)

I have 2 VPCs (default and special) each hosting 1 EC2 instance. Both instances have the same security group (say name = internal). The security group allows All Traffic from internal (a circular ...
0
votes
0answers
129 views

AWS Lambda Function to dynamically add and remove public ip to security group

I was looking for a way through which I can add and remove rule in specific security group. Background: I am building an AWS Code Pipeline which will allow EC2 instance to pull code from AWS Code ...
2
votes
2answers
119 views

System Account Access Token missing groups

I'm experiencing a weird phenomena regarding Windows SYSTEM Account. Looking at these three different ways to start a process as SYSTEM: Sysinternals PSExec Task Scheduler GPO Startup Script. ...
0
votes
1answer
260 views

Unable to remove security group from OU advance permission due to inheritance + Active directory 2012

I am trying to remove one of the security group which has inherit permission on one of my OU in Active Directory. When i click on remove i get the message " You cant remove xxx group (Domian\xxxgroup) ...
0
votes
0answers
23 views

Attack Surface Analyzer report possible actions

I am using Microsoft's Attack Surface Analyzer, and I would like to get a better understanding of what would be the best way to mitigate the findings. For example if in my report I get Directories ...
0
votes
1answer
209 views

AWS Network ELB vs security groups

Decided to move a couple of internal LBs from classic to network ELB. And I have noticed that NetELB does not accept traffic within the scope of those rules which have as source another security group ...
1
vote
0answers
20 views

Incorrectly-Made Security Group

I was recently trying to research into nested groups, and I ran a gpresult under my standard domain (non-elevated) account. I noticed 2 AD security groups that my account was inheriting that made no ...
0
votes
1answer
178 views

AWS VPC peering using security groups

I setup a VPC peering connection between two regions (us-west-2, eu-central-1) in a single AWS account. In the documentation I see: You cannot reference the security group of a peer VPC that's in a ...
0
votes
1answer
55 views

Does AWS security group apply to communication between processes on an instance?

Do inbound and outbound traffic rules apply to communication between processes inside an instances? For example, My MongoDB instance is running on port 27017 while my Node.js app is listening to port ...
1
vote
1answer
35 views

Proper way to manage privileged admin groups for two trusted Active Directory forests?

The scenario is: There are two domains (DomA and DomB) with a trust relationship. The relationship is forest wide with the exception that DomA can access resources in DomB, but users in DomB should ...
0
votes
1answer
286 views

Issues with Deploying multiple printers in a single GPO with Item-Level Targeting

I have a single GPO that contains all printers I need to deploy. The security filtering for this GPO is set to Authenticated Users. The GPO is linked to the OU with all of our users. GPO > User Config ...
0
votes
1answer
291 views

What are ingress security groups in AWS / Terraform

When defining an AWS security group in Terraform, you can set up inbound/ingress configurations. However, these ingress configurations can also point at other security groups. The terraform ...
2
votes
1answer
193 views

securely connect jenkins and github

we have a Jenkins server running on an ec2 instance. The security groups are very restricted in this server, they only allow traffic from the company office, and the slave nodes. we want to setup ...
1
vote
0answers
1k views

Squid with AD groups + Kerberos authentication in pfsense?

I followed steps found on the link: https://journeyofthegeek.com/2017/12/30/pfsense-squid-kerberos/ And the kerberos authentication without AD group membership restriction works very well, but I don'...
0
votes
2answers
39 views

Server 2012 R2 - Adjusting security permissions for active directory security groups

I have created an active directory security group. I would like to adjust the security permissions so a group will have the following permissions. The identified group should be able to add computer ...
3
votes
1answer
584 views

Do we need both security groups and server-side firewall in AWS EC2?

EC2 security groups looks awesome, but i am quite new to AWS system, that's why i am asking this question. Do i also need to setup server firewall while having AWS security group? My main point is ...
0
votes
1answer
183 views

Allow one member of a security group to access a folder, deny access to the remaining members of the same security group

I wish to know if the following is possible and how to apply it within AD structure running on windows server 2012R2. I apply folder access using security groups. Example = Agents folder can only be ...
1
vote
1answer
1k views

EC2 instance's Docker ports not not accessible after changing instance type

When changing the EC2 instance type I ran into a problem. The machine had 3 Docker containers that needed to be restarted and after the restart their ports became unreachable. What could be the ...
1
vote
1answer
40 views

Windows Server 2008 r2 security permissions [closed]

I hope I've selected the correct StackExchange for this question. I have searched google and StackExchange but haven't been able to find an answer to my question with the search queries used. I ...
0
votes
1answer
964 views

How to allow connection between ec2 instances in different regions?

I have 10 instances with a security group in Oregon and another 10 in Virginia. How to add edit security group(rules) to allow traffic between them??
5
votes
1answer
2k views

Difference between security groups (on AWS) and iptables

I'm just setting up a server and wondering if it's necessary to set the firewall twice. For example I've a security group with the following open ports: 80, 443, 22 Now I setup my server with UFW (...
0
votes
1answer
597 views

AWS: NGinx Reverse Proxy and Security Groups

I have two servers, called NGinxServer and AppServer. NGinxServer is the accessible entry point for all calls to AppServer. For security reasons, I modified the Security Group for AppServer to not ...
2
votes
0answers
214 views

Exchange online security groups without email

We're trying to create user groups in Exchange Online in order to group users when applying permissions to specific folder on shared mailboxes. We don't want to mail-enable those groups, but I don't ...
1
vote
1answer
78 views

Microsoft SQL Server users from OU/SG

MSSQL has its own user authentication apart from the operating system or Active Directory user authentication but can I apply database permissions to organisational units or security groups or somehow ...
2
votes
1answer
31 views

AWS security rules bug?

I'm trying to put online a website with HTTPS. I have double checked AWS Security Groups, and everything looks fine. I'm running on Node.JS, and this is the app script, so I'm pretty sure it's ...
0
votes
2answers
40 views

Check who / when EC2 instance was assigned a security group

I'm pretty new to EC2 so apologies if this is trivial but I can't seem to find an answer from Google. I have a EC2 instance that was in a security group it should not have been in. Whilst I have ...
1
vote
3answers
879 views

Assign default security group to Elastic Beanstalk instance

I have created a Elastic Beanstalk environment and I have a rails app running which is great. However I am unable to assign is to the default security group. Current config I have added a ...
1
vote
1answer
468 views

Network problems when I create Beanstalk environments from an AMI

I'm using AWS elastic beanstalk web interface to create an environment based on an existing AMI that has our application deployed on it. The environment gets created, the app is accessible via the ...
0
votes
0answers
32 views

User ACEs in ACL for created directories outside AD Security Group Control

We control access to our file shares using Security Groups in AD. \ZONE ZONE Group (Read & Execute, This Folder only) ZONE-Write Group (Modify, This folder, subfolders and files) user "rick....
0
votes
1answer
31 views

How to customize permission for a group on Windows Server?

I want to create a "restricted" administrator group that can only run the privileged PowerShell cmdlet Get-RemoteAccessConnectionStatistics. Does Windows Server support such level of granularity? And ...
0
votes
1answer
290 views

Security group to allow connection from OpenVPN network

I am making a openVPN server in my AWS VPC. I want to make a security group that only accept SSH connection from my VPN. I already using my VPC CIDR (10.0.0.0/8), OpenVPN public address, and OpenVPN ...
1
vote
0answers
274 views

OpenVAS With NVT Feed Sync Error on Kail Linux and Ubuntu

Recently installed OpenVAS on Kail Linux and Ubuntu from ISO but have been running into an issue with the sync process. When installed onto VMware Workstation via Kail VM image updates the openvas-...
0
votes
1answer
39 views

Why is security group in Windows Active directory called security?

Do you know in any chance why Security group link is called security? Is any property of AD object somehow hashed or something like that?
0
votes
0answers
40 views

Domain Admins - Restoring Privledges

Long story short, Domain Admins have been stripped of their privileges and need to become proper administrators of the domain again. My predecessor removed the Domain Admins group of all permissions ...
0
votes
1answer
446 views

VPC peering sharing security group ingress rules

If I have VPC1 with security group (sg-aaaaaaaa) that allows ssh access from source 10.10.10.10/32 and I peer VPC1 with VPC2 that has a security group (sg-bbbbbbbb) that allows ssh access from source ...
0
votes
0answers
1k views

Not able to get the apt repo update on amazon ubuntu ec2 instance

I've one ubuntu instance in EC2 on which i am trying to run sudo apt-get update command and which is giving below error :- Err http://ppa.launchpad.net trusty InRelease Err http://ppa.launchpad.net ...
0
votes
1answer
625 views

pass an existing VPC ( or Subnet/Security group) as a parameter to the template using the Ref built-in?

I am trying to find a way to set default VPCs, Subnets and Security Groups in the Cluster.template JSON file. Is there a way to pass an existing VPC ( or Subnet/Security group) as a parameter to the ...
2
votes
4answers
71 views

Windows server 2012 Active Directory Groups

Have a quick question. I work in a large company and i've always been told that if a users needs let's say access his emails on the phone he has to be member of a specific group (apart from ...