The service can route traffic between resources in the virtual network and the public internet through an internet gateway, enabling direct internet access for those resources.
Connectivity Options - Internet Gateway
CCC.VPC.CP08
Related Threats
| ID | Title | Description |
|---|---|---|
| CCC.VPC.TH02 | Resources are Exposed to the Public Internet | Assignment of external IP addresses to resources, including globally routable IPv6 addresses, exposes resources to the public internet, increasing the risk of attacks such as brute force, exploitation of vulnerabilities, or unauthorized access. |
| CCC.VPC.TH08 | Unrestricted Outbound Traffic Enables Data Exfiltration | Internet and NAT gateways may be deployed without egress filtering, so that any resource in the network can initiate connections to any destination on the public internet. A compromised resource can then transfer data to external systems or reach command-and-control infrastructure, impacting the confidentiality of data. |