Loading controls...
Benchmark: VPC
Description
This benchmark provides a set of controls that detect Terraform AWS VPC resources deviating from security best practices.
Usage
Browse dashboards and select VPC:
steampipe dashboardOr run the benchmarks in your terminal:
steampipe check terraform_aws_compliance.benchmark.vpcSnapshot and share results via Steampipe Cloud:
steampipe loginsteampipe check --share terraform_aws_compliance.benchmark.vpcControls
- VPC default security group should not allow inbound and outbound traffic
- VPC EIPs should be associated with an EC2 instance or ENI
- VPC flow logs should be enabled
- VPC internet gateways should be attached to authorized vpc
- Unused network access control lists should be removed
- VPC security group should have description for rules
- VPC security group rule should have description for rules
- VPC subnet auto assign public IP should be disabled
- VPC security groups should be associated with at least one ENI