Control: Ensure subnets are not publicly accessible
Description
Public access to a Network's subnet increases resource attack surface and unnecessarily raises the risk of resource compromise. A network source is a set of defined IP addresses. The IP addresses can be public IP addresses or IP addresses from VCNs within your tenancy. After you create a network source, you can reference it in policy or in your tenancy's authentication settings to control access based on the originating IP address.
Usage
Run the control in your terminal:
powerpipe control run terraform_oci_compliance.control.vcn_subnet_public_access_blockedSnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run terraform_oci_compliance.control.vcn_subnet_public_access_blocked --shareSQL
This control uses a named query:
vcn_subnet_public_access_blocked