Query: EFS mount targets should not be associated with subnets that assign public IP addresses on launch

Description

This control checks whether an Amazon EFS mount target is associated with subnets that assign public IP addresses on launch. The control fails if the mount target is associated with subnets that assign public IP addresses on launch.

Query

Tables used in this query:

• aws_efs_mount_target
• aws_vpc_subnet

Controls using this query:

• 6 EFS mount targets should not be associated with subnets that assign public IP addresses on launch
• EFS mount targets should not be associated with subnets that assign public IP addresses on launch

SQL