> ## Documentation Index
> Fetch the complete documentation index at: https://cloudanix.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Security Groups Audit

## Checks performed

* [Default Security Group Should Not Be Publicly Accessible](sgaudit/rules/ec2_instances_exist_with_default_groups_and_public)
* [Default Security Groups Should Block All Traffic](sgaudit/rules/ec2_instances_exist_with_default_groups)
* [Excessive Number of Security Groups Should Not Be Present](sgaudit/rules/ec2_instances_exist_with_multiple_security_groups)
* [Ports Should Not Be Open for Internal Traffic](sgaudit/rules/ec2_instances_exist_with_ports_open_for_internal)
* [Ports Should Not Be Open for External Traffic](sgaudit/rules/ec2_instances_exist_with_ports_open)
* [EC2 Instance Should Not Have Open ICMP ports](sgaudit/rules/ec2_instances_with_icmp_exist)
* [EC2 instances Should Not Be Publicly Accessible](sgaudit/rules/ec2_public_instances_exist)
* [MQ Active Has Deployment Mode](sgaudit/rules/mq_active_deployment_mode)
* [MQ Has Automatic Minor Version Upgrades](sgaudit/rules/mq_automatic_minor_version_upgrade_enabled)
* [MQ Broker Instance Should Not Be Public](sgaudit/rules/mq_broker_instance_public)
* [MQ Brokers Has Cloudwatch Audit Logging](sgaudit/rules/mq_cloudwatch_audit_logging_enabled)
* [MQ Broker Should Not Be Publicly Accessible](sgaudit/rules/mq_publicly_accessible)
* [MQ Rabbit Has Deployment Mode](sgaudit/rules/mq_rabbit_deployment_mode)
* [Unused Network ACLs Should Be Removed](sgaudit/rules/network_acl_unused_exists)
* [RDS Instances Should Not Be Publicly Accessible](sgaudit/rules/rds_public_instance_exists)
* [Redshift Should Not Be Publicly Accessible](sgaudit/rules/redshift_public_instance_exists)
* [Unused Security Groups Should Be Removed](sgaudit/rules/security_group_unused_exists)
* [Flow Logs Should be Enabled on Subnet](sgaudit/rules/subnet_exists_without_flow_logs)
* [Flow Logs on VPC Should Be Enabled](sgaudit/rules/vpc_exists_without_flow_logs)
* [Unused Virtual Private Gateways Should Be Removed](sgaudit/rules/vpc_unused_exists)