The service can create a subnet whose resources cannot directly reach the public internet, so that workloads are reachable only through private connectivity or an outbound gateway.
Private Subnet Creation
CCC.VPC.CP05
Related Threats
| ID | Title | Description |
|---|---|---|
| CCC.VPC.TH07 | Routes are Modified to Redirect or Expose Traffic | Route tables may be modified to send traffic through an unauthorized network appliance, or to add an internet or NAT gateway route to a subnet that was designed to be private. Traffic is then observed or altered in transit, or resources gain an unintended path to the public internet, impacting the confidentiality and integrity of data and enabling exfiltration. |