Opening up ACLs to the public internet is potentially dangerous. You should restrict access to IP addresses or ranges that explicitly require it where possible.
The ports are exposed for ingressing data to the internet
Set a more restrictive cidr range
The following example will fail the aws-vpc-no-public-ingress check.
The following example will pass the aws-vpc-no-public-ingress check.