Control: Ensure the Network default security list of every VCN restricts all traffic except ICMP
Description
A default security list is created when a Virtual Cloud Network (VCN) is created. Security lists provide stateful filtering of ingress and egress network traffic to OCI resources. It is recommended no security list allows unrestricted ingress access to Secure Shell (SSH) via port 22.
Usage
Run the control in your terminal:
powerpipe control run terraform_oci_compliance.control.vcn_default_security_group_allow_icmp_only
Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run terraform_oci_compliance.control.vcn_default_security_group_allow_icmp_only --share
SQL
This control uses a named query:
vcn_default_security_group_allow_icmp_only