Security Group Summary
Tiers
3
Total Ingress Rules
4
Total Egress Rules
3
Security Groups by Tier
web — Frontend/Load Balancer tier — internet-facing
Security Group: globalbank-fraud-detection-web-sg
Ingress Rules (2)
| Protocol | Port(s) | Source | Description |
|---|---|---|---|
| tcp | 443 | 0.0.0.0/0 | HTTPS from internet |
| tcp | 80 | 0.0.0.0/0 | HTTP from internet (redirect to HTTPS) |
Egress Rules (1)
| Protocol | Port(s) | Destination | Description |
|---|---|---|---|
| tcp | 443 | 0.0.0.0/0 | Outbound HTTPS |
app — Application tier — receives traffic from web tier
Security Group: globalbank-fraud-detection-app-sg
Ingress Rules (1)
| Protocol | Port(s) | Source | Description |
|---|---|---|---|
| tcp | 8080 | tier:web | Application traffic from web tier |
Egress Rules (2)
| Protocol | Port(s) | Destination | Description |
|---|---|---|---|
| tcp | 5432 | tier:db | Database connections to database |
| tcp | 443 | 0.0.0.0/0 | Outbound HTTPS (AWS APIs, package repos) |
db — Database tier — receives traffic from app tier only
Security Group: globalbank-fraud-detection-db-sg
Ingress Rules (1)
| Protocol | Port(s) | Source | Description |
|---|---|---|---|
| tcp | 5432 | tier:app | From application tier |
Egress Rules (0)
No rules defined.