Control: EKS cluster node group should be configured to restrict SSH access from 0.0.0.0/0
Description
EKS cluster node group SSH access should be restricted from internet. If you specify ec2_ssh_key, but do not specify source_security_group_ids configuration when you create an EKS Node Group, port 22 on the worker nodes is opened to the Internet (0.0.0.0/0).
Usage
Run the control in your terminal:
powerpipe control run terraform_aws_compliance.control.eks_cluster_node_group_ssh_access_from_internet
Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run terraform_aws_compliance.control.eks_cluster_node_group_ssh_access_from_internet --share
SQL
This control uses a named query:
eks_cluster_node_group_ssh_access_from_internet