Questions tagged [security-groups]
The security-groups tag has no usage guidance.
178
questions
0
votes
1
answer
4k
views
how EC2 Security Group uses group id as the value in the source column
We want to setup a security group that is more specific and manageable and the concept that we came up is via:
sg-public-group: allows 80/443 globally
sg-private-group: just a label for the meantime
...
- 23
2
votes
2
answers
2k
views
Source CIDR/IP/Security group setup in Security Groups Inbound Rules
I want to set up security group for an ec2 instance(Linux). There are services running on it like mem cached, python, dhclient, nodejs etc. How do i know which IP/CIDR-block should my server be ...
- 21
2
votes
1
answer
5k
views
Whitelist multiple public IPs across security groups in AWS
We have a bunch of 50-odd external (non-AWS) servers that we need to whitelist across many (~50) security groups (vpc). Apart from the constraint on the number of rules, adding and removing entries to/...
- 133
1
vote
1
answer
2k
views
terraform - AWS VPC change the default security group
How do i edit the ingress and egress and also the tags of the default security group within AWS VPN created by Terraform
What i have tried:
resource "aws_security_group" "default" {
name =...
- 151
1
vote
1
answer
4k
views
How can I override a folder redirection policy for laptop users Server 2008
The previous IT divided the users into OU's based on their position (for example: marketing, sales etc), there are 4 OU's in total. A group policy object is applied to all 4 OU's and one of the ...
- 23
1
vote
2
answers
619
views
How to delegate OU permissions to a computer account nested in a security group?
The problem:
I can't give a computer account the permissions to add groups to an OU by adding that computer account to a security group that has been granted the permission to add groups to that OU.
...
- 91
0
votes
0
answers
160
views
AWS security group change
I modified the security group for two VMs on AWS (from one security group to another - not just editing the security rules of an existing group). The VM's are behind Amazon ELB (and using Route 53). ...
- 1,180
0
votes
1
answer
480
views
cannot access server when i change inbound rules in security group
I have installed mark logic server on public subnet, now the mark logic ui opens at http://publicip:8001 when the source of the security group is 0.0.0/0
Now i am trying to restrict the traffic and ...
- 103
0
votes
2
answers
2k
views
Port won't open on new EC2/AWS instance
I created a new instance, added the same security groups as before in EC2, selected the same VPC as before (everything exactly the same afaik), but now I get: ERR_CONNECTION_REFUSED when I try to ...
- 103
0
votes
2
answers
667
views
Connect to AWS EC2 SSH for public location best practice
I have recently been learning about how to set up and run a Linux server on Amazon and I have been wondering about the best practice for SSH into it from a public place. By public place I mean like a ...
- 121
2
votes
1
answer
2k
views
Connecting OpenVPN client over Peering Connection to different VPC AWS
I am trying to connect the VPN client to VPC different than VPN server belongs to. That's my setup: Network diagram
However I can't manage the VPN client 10.8.0.6 to be able to reach the instance in ...
- 183
1
vote
1
answer
818
views
Azure load balancer security group attached to NAT pools
I'm looking to lock down a set of Azure load balancer NAT rules to certain CIDR address ranges via network security groups, for the purpose of not directly exposing SSH/RDP ports to the internet. The ...
4
votes
2
answers
5k
views
Disable password complexity on Windows 2012 R2
I have a Windows Server 2012 R2 that is my domain controller. I want to disable the password complexity rule for a few users only.
I have created a group (called Formation) in AD to identify these ...
- 155
0
votes
2
answers
5k
views
Unable to browse tomcat from web browser in EC2
I have configured Security Groups, my tomcat is running in 8080 port. But I am unable to browse from web browser.
Please anyone there to help me ?
Public IP is : 52.39.220.183
When I do curl http://...
- 121
1
vote
1
answer
119
views
Unable to connect to EC2 instance from another instance
I recently added a service on server A that needs to be accessed from server B. The service is listening is on port 8182 and is operating normally:
[ec2-user ~]$ sudo netstat -tnlp | grep 8182
tcp ...
- 111
0
votes
1
answer
4k
views
Restrict Group Membership for users not from particular OU
I need to configure two type of users that can administer AD users and security groups:
Type 1 - Can only create users within particular OU.
Type 2 - Can only change group membership of users created ...
2
votes
1
answer
2k
views
Resetting Windows' File Security Permissions
I'm trying to find the correct commands to reset each of my hard drives permissions to remove all of the incorrect, outdated groups/usernames that have built up on folders over time and reset the ...
- 139
2
votes
1
answer
54
views
Is there a way to name Security Group Sources in the AWS Console?
The title kind of says it all but what I want to know is if there is any way to label/name inbound security group sources in the AWS console. i.e.:
We have quite a bit of these rows in our security ...
- 123
0
votes
1
answer
279
views
Automatically Setting Printer ACLs for Multiple Printers on Multiple Terminal Servers
Does anyone have an example of how to script (preferably as a batch file) to set ACLs on multiple printers installed on multiple servers? I searched Google and found some examples of settings ACLs on ...
- 3,154
5
votes
1
answer
777
views
EC2 - should security groups be specialized and stacked?
I haven't been able to find any best practices for AWS security groups. I figure there are two approaches I could take, but I'm not sure on if there are any particular drawbacks to either one.
...
- 443
1
vote
0
answers
568
views
EC2 Shared Drive / VPN / Security Groups
I have an EC2 instance, running Win 2008. On it, I have a shared drive. Windows permissions are set properly. The server has a static IP through Elastic IP.
I do not want to open this to the world. I ...
1
vote
2
answers
85
views
GPO Security Filtering Using Groups
A GPO was setup with filtering applied to a single group containing computer objects. Is a restart mandatory for all the computer objects listed in the "New Group" for GPO to be applied on them? or is ...
- 837
1
vote
0
answers
308
views
How to setup a security group on AWS that allows incoming traffic only by certain Elastic Beanstalk servers?
we have the following setting on AWS: 8 Elastic Beanstalk environments (4 QA, 4 PROD) read and write data. Typically, 1 environment (the API) always reads data from DynamoDB and RDS and 1 environment (...
- 169
0
votes
1
answer
241
views
Show user which Group is required for Apache Basic Auth page
Is it possible to show which 'group' is required for access to a web page protected with Apache Basic Auth? Ideally, the pop-up requesting username and password would pass the 'group' required as a ...
- 129
1
vote
0
answers
248
views
Security Group of AWS Load Balancer does not forward traffic to backend instance
Before I created the new security group (id sg-abcdefg), I am able to reach the load balance from the IP address 107.178.195.144 via http. The load balancer will then forward the traffic to the ...
- 3,488
3
votes
1
answer
3k
views
Apache server on EC2 responds on localhost but not public IP
I set up an AWS EC2 server and then Apache. It works fine.
Cloned the AMI and shared it with another account. Spun up an instance on the new account and it seems to work fine.
I can SSH to the new ...
- 1,000
1
vote
2
answers
1k
views
List all groups or users in directories recursively
Context
Windows 2008 R2 infrastructure.
We manage network share permissions by AD security groups and put user objects in those groups.
Objective
I want to see what security groups are currently ...
- 186
6
votes
2
answers
10k
views
python boto3 allow ingress security groups
I am developing a simple python script to add rules to securitygroups, and I am wondering what is the difference between the two methods available within boto3: authorize_security_group_ingress(**...
- 646