Control: Ensure subnets are not publicly accessible
Public access to a Network's subnet increases resource attack surface and unnecessarily raises the risk of resource compromise. A network source is a set of defined IP addresses. The IP addresses can be public IP addresses or IP addresses from VCNs within your tenancy. After you create a network source, you can reference it in policy or in your tenancy's authentication settings to control access based on the originating IP address.
Run the control in your terminal:
steampipe check terraform_oci_compliance.control.vcn_subnet_public_access_blocked
Snapshot and share results via Steampipe Cloud:
steampipe loginsteampipe check --share terraform_oci_compliance.control.vcn_subnet_public_access_blocked
This control uses a named query:vcn_subnet_public_access_blocked