nccgroup / ScoutSuite

Multi-Cloud Security Auditing Tool
GNU General Public License v2.0
6.68k stars 1.06k forks source link

False positive "Default security groups in use" when using VPC Trunking #621

Open fabiodouek opened 4 years ago

fabiodouek commented 4 years ago

VPC Trunking associates out of the box the EC2 ENI with the Default security group. I've raised that with AWS support, and according to them this is as per design. In that case, would be sensible if Scout were to check if: VPC Trunking is enabled, and the ECS host is of an instance type which supports VPC trunking, then this issue shouldnt be reported.

x4v13r64 commented 4 years ago

Thanks, will look into it.