I’m looking at some rules that detect traffic on ports and it seems to flag a lot of traffic to AWS resource like the NAT gateway that we do not control. Is it possible to exclude these based on the resource type? For example: Remove Network - Internet traffic over insecure port (22) Exclude Network - Internet traffic (21,23,80,443,8444,8443,22) How do I compose the RQL?
... View more