The service can connect multiple virtual networks and on-premises networks through a central transit hub in a hub-and-spoke model.
Connectivity Options - Transit Hub
CCC.VPC.CP12
Related Threats
| ID | Title | Description |
|---|---|---|
| CCC.VPC.TH03 | Network Access is Granted Through Unauthorized Peering or Transit Attachments | Unauthorized peering connections or transit hub attachments can allow network traffic between untrusted or unapproved subscriptions, leading to potential data exposure or exfiltration. |
| CCC.VPC.TH06 | Overlapping Address Ranges Disrupt Connectivity | Address ranges may be assigned that overlap with those of peered networks or transit hub spokes. Traffic destined for the overlapping range is dropped or routed to the wrong network and the connection cannot be established, impacting the availability of connected resources and the integrity of traffic that reaches an unintended destination. |
| CCC.VPC.TH09 | Compromise Propagates Over Hybrid Connections | Private connections, site-to-site VPNs, and transit hubs may be configured with routes and network rules that permit broad access between on-premises networks and the virtual network. A compromise of either side can be used to move laterally into the other, impacting the confidentiality, integrity, and availability of resources on both sides of the connection. |