Ravi Sir's Cyber Security Cards › Interview Cards
Scenario: MySQL on EC2 is bound to 0.0.0.0 and SG open. How do you harden?
Scenario: MySQL on EC2 is bound to 0.0.0.0 and SG open. How do you harden? Stop MySQL listening to the world and close port 3306 from the internet. Bind MySQL to localhost or the private IP. Allow only the app’s security group. Use least-privilege DB users. Check backups. Consider private RDS. “I bi
Read card text
What this card says
Short answer
Stop MySQL listening to the world and close port 3306 from the internet.
Steps
Bind MySQL to localhost or the private IP. Allow only the app’s security group.
Use least-privilege DB users. Check backups. Consider private RDS.
Say it in the interview
“I bind MySQL to localhost, close 3306 to the internet, and allow only the app SG, then re-scan to confirm.”
Why it matters
A public database is an open door. 3306 should never face 0.0.0.0/0.
Learn more in the lesson: 46.10 Scenario Round — Sahyadri / Raja-Rani