---
type: post-synth-check
title: WAW019
description: Security group allows unrestricted ingress on sensitive ports (SSH, RDP, database)
id: WAW019
severity: error
category: post-synth
lexicon: aws
docs: https://intentius.io/chant/lexicons/aws/rules/
---
Security group allows unrestricted ingress on sensitive ports (SSH, RDP, database)

## Applies to

- [EC2SecurityGroupIngress](/types/EC2SecurityGroupIngress.md)
- [SecurityGroup](/types/SecurityGroup.md)
- [Type](/types/Type.md)