turbot/terraform_oci_compliance

GitHub
Loading controls...

Control: Ensure subnets are not publicly accessible

Description

Public access to a Network's subnet increases resource attack surface and unnecessarily raises the risk of resource compromise. A network source is a set of defined IP addresses. The IP addresses can be public IP addresses or IP addresses from VCNs within your tenancy. After you create a network source, you can reference it in policy or in your tenancy's authentication settings to control access based on the originating IP address.

Usage

Run the control in your terminal:

steampipe check terraform_oci_compliance.control.vcn_subnet_public_access_blocked

Snapshot and share results via Steampipe Cloud:

steampipe login
steampipe check --share terraform_oci_compliance.control.vcn_subnet_public_access_blocked

SQL

This control uses a named query:

vcn_subnet_public_access_blocked

Tags