turbot/aws_perimeter
GitHub
Loading controls...

Control: VPC subnets should not auto-assign public IP addresses

Description

This control checks whether VPC subnets automatically assign public IPv4 addresses.

Usage

Run the control in your terminal:

steampipe check aws_perimeter.control.vpc_subnet_auto_assign_public_ip_disabled

Snapshot and share results via Steampipe Cloud:

steampipe login
steampipe check --share aws_perimeter.control.vpc_subnet_auto_assign_public_ip_disabled

Plugins & Tables

SQL

select
subnet_id as resource,
case
when map_public_ip_on_launch = 'false' then 'ok'
else 'alarm'
end as status,
case
when map_public_ip_on_launch = 'false' then title || ' auto-assign public IP addresses disabled.'
else title || ' auto-assign public IP addresses enabled.'
end as reason,
region,
account_id
from
aws_vpc_subnet;

Tags