Control: EC2 network interfaces should not have a public IP address
Description
This control checks if EC2 network interfaces are associated with any public IP.
Usage
Run the control in your terminal:
powerpipe control run aws_perimeter.control.ec2_network_interface_not_publicly_accessible
Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run aws_perimeter.control.ec2_network_interface_not_publicly_accessible --share
Steampipe Tables
SQL
select network_interface_id as resource, case when association_public_ip is null then 'ok' else 'alarm' end status, case when association_public_ip is null then network_interface_id || ' not publicly accessible.' else network_interface_id || ' publicly accessible.' end reason , region, account_idfrom aws_ec2_network_interface;