Networking / VPC

Threats

Version:

ID	Title	Description
CCC.VPC.TH01	Unauthorized Access via Insecure Default Networks	Default network configurations may include insecure settings and open firewall rules,leading to unauthorized access and potential data breaches.
CCC.VPC.TH02	Exposure of Resources to Public Internet	Assignment of external IP addresses to resources exposes resources to the public internet, increasing the risk of attacks such as brute force, exploitation of vulnerabilities, or unauthorized access.
CCC.VPC.TH03	Unauthorized Network Access Through VPC Peering	Unauthorized VPC peering connections can allow network traffic between untrusted or unapproved subscriptions, leading to potential data exposure or exfiltration.
CCC.VPC.TH04	Lack of Network Visibility due to Disabled VPC Flow Logs	VPC subnets with disabled flow logs lack critical network traffic visibility, which can lead to undetected unauthorized access, data exfiltration, and network misconfigurations. This lack of visibility increases the risk of undetected security incidents.
CCC.VPC.TH05	Overly Permissive VPC Endpoint Policies	VPC Endpoint policies that are overly permissive may inadvertently expose resources within the VPC to unintended principals or external threats.