turbot/terraform_aws_compliance

Control: EKS cluster node group should be configured to restrict SSH access from 0.0.0.0/0

Description

EKS cluster node group SSH access should be restricted from internet. If you specify ec2_ssh_key, but do not specify source_security_group_ids configuration when you create an EKS Node Group, port 22 on the worker nodes is opened to the Internet (0.0.0.0/0).

Usage

Run the control in your terminal:

powerpipe control run terraform_aws_compliance.control.eks_cluster_node_group_ssh_access_from_internet

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run terraform_aws_compliance.control.eks_cluster_node_group_ssh_access_from_internet --share

SQL

This control uses a named query:

eks_cluster_node_group_ssh_access_from_internet

Tags