AWS Remove ACLs allow ingress from 0.0.0.0/0 such as 22 and 3389.

[pareshcc]

Describe the feature

I wanted to ensure no Network ACLs allow ingress from 0.0.0.0/0 to remote server administration ports. Public access to remote server administration ports, such as 22 and 3389, increases resource attack surface and unnecessarily raises the risk of resource compromise. I am trying below remediation, but it is not working, can some help me in this.

policies:
  - name: nacl
    resource: network-acl
    filters:
      - or:
        - type: ingress
          Ports: [20]
          Cidr:
            value: "0.0.0.0/0"
        - type: ingress
          Ports: [20]
          CidrV6:
            value: "::/0"    
        - type: ingress
          Ports: [3306]
          Cidr:
            value: "0.0.0.0/0"
        - type: ingress
          Ports: [20]
          CidrV6:
            value: "::/0"      
    actions:
      - delete

Extra information or context

No response

[thisisshi]

rather than a delete action this should probably be remove-matched or something like that

[pareshcc]

@thisisshi Sure I will try, but It is not supported filters as well using ingress/egress, can you help me in this as well.