Every deploy makes a promise about the network: "this box only exposes SSH and HTTPS," "the database is never reachable from outside the app tier. " Nmap is how you turn that promise into a test that either passes or fails. Nobody has to take the security group's word for it.

Source: [Dev.to](https://dev.to/jjoyneriv/nmap-for-authorized-infrastructure-validation-not-hacking-3ne6)

Sponsored