Control: VPC subnets should not auto-assign public IP addresses
Description
This control checks whether VPC subnets automatically assign public IPv4 addresses.
Usage
Run the control in your terminal:
powerpipe control run aws_perimeter.control.vpc_subnet_auto_assign_public_ip_disabled
Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run aws_perimeter.control.vpc_subnet_auto_assign_public_ip_disabled --share
Steampipe Tables
SQL
select subnet_id as resource, case when map_public_ip_on_launch = 'false' then 'ok' else 'alarm' end as status, case when map_public_ip_on_launch = 'false' then title || ' auto-assign public IP addresses disabled.' else title || ' auto-assign public IP addresses enabled.' end as reason , region, account_idfrom aws_vpc_subnet;