The following security groups are configured:
- DB Security Group: used by the RDS instances and allows access to SQL Server port 1433 from the EBT (Beanstalk) Security Group and Web Security Group
- Web Security Group: Allows access only to RDP port 3389 from the Bastion Security Group
- EBT Security Group: This group is created automatically when provisioning Beanstalk environment and is configured to allow connections to port 80, 443 and RDP port 3389 from the ELB Security Group and Bastion Security Group
- ELB Security Group: This group is created automatically when provisioning Beanstalk environment and is configured to allow connections to port 80 and 443 from any IP address.
- Bastion Security Group: This group allows RDP connection to port 3389 from any IP address. For added security, the group will be configured to allow connections from specific IP addresses only.
Set up to protect the website (firewalls, IPS)
(TBD – BCP diagram with back-up zoned)
