Are there any security issues if I open a port for public on my AWS EC2 for running slackbot

Question

I am making a Slackbot on my AWS EC2, and I need to open port 3000 for public to listen post requests from Slack whenever users do some actions because Slack doesn't provide their IP range.

I wonder if there are any security issues with my EC2 if I open a port publicly ? I also use this EC2 to run Airflow.

Answer 1

1. Open ports can be dangerous when the service listening on the port is misconfigured, unpatched, vulnerable to exploits, or has poor network security rules.
2. Attackers use open ports to find potential exploits. To run an exploit, the attacker needs to find a vulnerability.
3. AWS works on Shared Responsibility Model - means AWS is responsible for “Security of the Cloud” and Customer is responsible for “Security in the Cloud”