AWS Redshift using default port

aws_redshift_default_port

Severity

info

Remediation Complexity

trivial

Remediation Risk

low

Remediation Effort

low

Vendor

AWS

Resource

Network

Description

AWS Redshift using default port (5439). An attacker can easily guess the port.

To fix it you must configure the property port with other port.

Learn more about this topic at AWS Redshift.

Examples

---
- name: Example playbook
  hosts: localhost
  tasks:
    - name: Basic cluster provisioning example
      community.aws.redshift:
        command: create
        node_type: ds1.xlarge
        identifier: new_cluster
        encrypted: true
        username: cluster_admin
        password: {{ pass }}

Mitigation / Fix

---
- name: Example playbook
  hosts: localhost
  tasks:
    - name: Basic cluster provisioning example
      community.aws.redshift:
        command: create
        node_type: ds1.xlarge
        identifier: new_cluster
        encrypted: true
        username: cluster_admin
        password: {{ pass }}
        port: 5441