We have an IIS webserver hosted in Azure. We want to monitor this server via our cloud SIEM hosted in AWS. To monitor, there is a requirement to open outbound 443, on the VM, to a few hundred AWS external IPs. Without this, the webserver can't talk to the SIEM.
Within these AWS external IPs are huge network ranges from /10 all the way to /32. The concern from the team was, even if it's AWS external IPs, that they are opening up the VM to a such a large range.
I wanted to hear your take from a security standpoint. Even if they are AWS external IPs, is the concern justified? Why?