Unauthorized peering connections or transit hub attachments can allow network traffic between untrusted or unapproved subscriptions, leading to potential data exposure or exfiltration.
Network Access is Granted Through Unauthorized Peering or Transit Attachments
CCC.VPC.TH03
Related Capabilities
| ID | Title | Description |
|---|---|---|
| CCC.VPC.CP11 | Connectivity Options - VPC Peering | The service can establish a private peering connection between two virtual networks so that their resources communicate using private addresses. |
| CCC.VPC.CP12 | Connectivity Options - Transit Hub | The service can connect multiple virtual networks and on-premises networks through a central transit hub in a hub-and-spoke model. |
Related Controls
| ID | Title | Description |
|---|---|---|
| CCC.VPC.CN03 | Restrict Peering and Transit Attachments to Authorized Accounts | Ensure VPC peering connections and transit hub attachments are only established with explicitly authorized destinations to limit network exposure and enforce boundary controls. |