[VMC on AWS] Cases where "VMware Cloud on AWS Configuration Alert: Action Required" occurs

Products

• VMware Cloud on AWS

Issue/Introduction

This article provides information about cases where "VMware Cloud on AWS Configuration Alert: Action Required" occurs.

Symptoms:
I have received multiple alert emails with the following subject line.

• Subject : VMware Cloud on AWS Configuration Alert: Action Required - High Severity

Cause

To enhance the security of VMConAWS service, the above notification will be given for environments with potentially insecure configurations that exist on your SDDC.

Resolution

As below, "VMware Cloud on AWS Configuration Alert" alert is currently notified to every organization owner and a member who has access to VMConAWS service when vCenter and HCX are allowed to connect from Any. It is recommended that you narrow down the connection source by referring to the information in the "Related Information" section.

VMware Cloud on AWS Configuration Alert: Action Required - High Severity

• VMware Cloud on AWS has identified that you have an unsafe Management Gateway Firewall Rule allowing Any Source (unrestricted) access to vCenter.
• VMware Cloud on AWS has identified that you have an unsafe Management Gateway Firewall Rule allowing Any Source (unrestricted) access to HCX.

Additional Information

[VMC] Cloud vCenter Firewall Security Best Practices (84154)
HCX for VMC - Protecting HCX Cloud Manager for Internet Access (86169)