Questions tagged [security-groups]
164 questions
0
votes
0 answers
TCP communication on port not responding on different Availability Zone or Subnet
I'm a little curious and confused about this situation. We setup a monitoring instance scraping an exposed endpoint on 2 different instances. Both on same VPC, same security group, same route table and ACL. Also, both instances uses the same AMI.…
![](../../users/profiles/967942.webp)
forgondolin
- 1
- 1
0
votes
1 answer
AWS Postgres database IP in security group, how to enter info to survive IP address changes?
I have an existing prod Postgres database and I would like to replicate a table to a new Postgres database. In order to get the two to be able to talk to each other, I had to edit an AWS security group and add the public IP address of the new…
![](../../users/profiles/106064.webp)
mj_
- 121
- 1
- 4
0
votes
0 answers
Linux: How to allow outbound rules for seccurity updates
We use aws ec2 instances with the 'AWS Linux AMI 2' image.
We have a script for security updates with this code: yum update -y --security.
I want to allow only security update in outbound rules - aws security group.
Can someone tell me what is the…
![](../../users/profiles/506245.webp)
user2503775
- 223
- 3
- 9
0
votes
1 answer
Create a Mail-enabled security groups with Azure AD role assignment?
I would like to create a Security Group within my firm's 365 Tenant with a group email address and role assignment of "Billing administrator" - i.e. Can perform common billing related tasks like updating payment information.
Is this even possible? I…
0
votes
0 answers
Logging on Windows with user accounts in Protected Users group over VPN
I am planning implementation of Microsoft’s Active Directory tier administrative model, and I was wondering how to overcome the problem of system administration over VPN. One of the security principals is to have all admin accounts in a Protected…
![](../../users/profiles/550635.webp)
Zoran Jankov
- 243
- 1
- 2
- 16
0
votes
1 answer
A user activity is detected from a disabled account in Active directory
I have disabled an user in my Active Directory (terminated the account). However, I am still getting the log that Event IDs 5379 (credential manager credentials were read.), 4673 (a privileged service was called.), 4656 (a handle to an object was…
![](../../users/profiles/953389.webp)
raal
- 3
- 1
0
votes
2 answers
AWS - Adding multiple IPs to Security Group Inbound Rules
I need to open 20 ports for 12 IP blocks.
Do I have to manually add 240 rules in this case? I feel like there must be a way to just copy&paste the IP list to somewhere.
I googled and found it's not possible, but it's hard to…
![](../../users/profiles/786860.webp)
Lunartist
- 105
- 3
0
votes
2 answers
How can I easily manage constantly changing public IP addresses in my many security groups
Our development environment is hosted on AWS, and is accessed by dozens of people. As people join and leave the project, or work from alternate (often temporary) locations, I find myself constantly updating many of our security groups.
Example:…
![](../../users/profiles/153062.webp)
Jeromy French
- 309
- 4
- 15
0
votes
2 answers
Nested AD Groups RDP permission not applying to new Windows Server 2019 VM
Similar Issue with no responses: Nested AD groups working in local computer groups, but certain servers fail to allow RDP?
I am only new to this environment and the person I took this over from also experienced this issue but didn't get very far…
![](../../users/profiles/862557.webp)
Krab
- 1
0
votes
0 answers
AWS ELB(classic load balancer) response is too slow and sometimes response is not coming it is showing timed out
I have EKS cluster setup in private subnet in which i'm having my microservices and for each microservice i have classic load balancer to access API. But response is having high latency and sometimes it just timed out.
I have service A which talks…
![](../../users/profiles/830972.webp)
uni
- 21
- 1
- 4
0
votes
2 answers
bulk removing direct access to a folder via PowerShell ACL
On a number of the servers where I work the share folder permissions have become cluttered with direct permissions for some of our techs due to them needing to take ownership. I have figured out how to fix the ownership issue so it won't happen…
![](../../users/profiles/792430.webp)
Robyn H
- 1
0
votes
3 answers
Is there a way to export all AWS Security Groups to CSV? moreover, is there a recommended way of keeping track of SR changes?
We have a relatively small dev environment in AWS with about 50 Security groups with multiple permission entries. is there a recommended way of keeping track of SR changes, Access, etc?
My manager dont want to use AWS config (Price wise), so the…
![](../../users/profiles/756541.webp)
Moshe Harel
- 1
- 1
0
votes
1 answer
PowerShell - Remove User/Group from Security Permissions
I have an AD group called "Admins" and it has specific members but under the Security Tab, how can I use Powershell to remove certain users/groups from the Security list and/or modify the Security permissions for users/groups (e.g. Bob or "Admins")…
![](../../users/profiles/600851.webp)
Lance
- 1
- 1
0
votes
1 answer
Adding a security group to AD user account using PowerShell
I am trying to build a PowerShell command that it will add a security group (not on Member Of) with full control permissions in AD user in order avoid doing it manually by hand. Is it possible ?
This is an example.
![](../../users/profiles/623071.webp)
John Pantelidis
- 21
- 2
0
votes
1 answer
Looking for a good explanation of how AWS Security groups behave
I'm struggling to get my head round port ranges described by AWS Security Groups and how they behave. I'm a software developer with many years of experience writing networking software so it's possible I'm just overcomplicating things.
What I'm…
![](../../users/profiles/94158.webp)
Philip Couling
- 1,535
- 1
- 17
- 32