Query: EKS cluster node group should be configured to restrict SSH access from 0.0.0.0/0

Description

EKS cluster node group SSH access should be restricted from internet. If you specify ec2_ssh_key, but do not specify source_security_group_ids configuration when you create an EKS Node Group, port 22 on the worker nodes is opened to the Internet (0.0.0.0/0).

Query

Tables used in this query:

• terraform_resource

Controls using this query:

• EKS cluster node group should be configured to restrict SSH access from 0.0.0.0/0

SQL