AWS · Free CLI guide · kloudaudit.eu

Find AWS Security Groups Open to 0.0.0.0/0 Port 22 3389 443

⚡ Quick answer — copy and run

aws ec2 describe-security-groups --query SecurityGroups --output json
1

Make sure you have the AWS CLI configured: aws configure

2

Run the command above. Review the output for resources to clean up.

3

Delete or stop resources that are confirmed idle or unused.

🔍

Don't want to script this manually?

KloudAudit finds this — and 17 other cost leaks — in 15 minutes. No credentials. No agents. Just your answers.

18 structured checks across compute, storage, network, database, governance
Waste Score + savings estimate for your exact bill size
AI Blueprint with exact CLI commands — $79, delivered in 2 minutes
Run Free Audit →

Why this matters

Security groups with 0.0.0.0/0 on port 22 (SSH) or 3389 (RDP) expose your instances to the entire internet. Automated scanners probe these continuously — it is a matter of when, not if.

⚠ Always verify resources are genuinely unused before deleting. Check with your team — a "stopped" instance may be intentional.

Find all 18 cost leaks at once

Teams typically find $500–$4,000+/month. Free. No credentials.

kloudaudit.eu →