Assignment of external IP addresses to resources, including globally routable IPv6 addresses, exposes resources to the public internet, increasing the risk of attacks such as brute force, exploitation of vulnerabilities, or unauthorized access.
Resources are Exposed to the Public Internet
CCC.VPC.TH02
Related Capabilities
| ID | Title | Description |
|---|---|---|
| CCC.VPC.CP03 | IPv6 CIDR Block | The service can be configured with an IPv6 CIDR block in addition to IPv4 so that resources in the virtual network are addressable over IPv6. |
| CCC.VPC.CP08 | Connectivity Options - Internet Gateway | The service can route traffic between resources in the virtual network and the public internet through an internet gateway, enabling direct internet access for those resources. |
Related Controls
| ID | Title | Description |
|---|---|---|
| CCC.VPC.CN02 | Prevent Default Exposure of Resources to the Internet | Ensure that resources in the virtual network are not reachable from the public internet unless explicitly configured, to minimize attack surfaces. |