turbot/terraform_oci_compliance

Control: Ensure subnets are not publicly accessible

Description

Public access to a Network's subnet increases resource attack surface and unnecessarily raises the risk of resource compromise. A network source is a set of defined IP addresses. The IP addresses can be public IP addresses or IP addresses from VCNs within your tenancy. After you create a network source, you can reference it in policy or in your tenancy's authentication settings to control access based on the originating IP address.

Usage

Run the control in your terminal:

powerpipe control run terraform_oci_compliance.control.vcn_subnet_public_access_blocked

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run terraform_oci_compliance.control.vcn_subnet_public_access_blocked --share

SQL

This control uses a named query:

vcn_subnet_public_access_blocked

Tags