Private endpoint policies that are overly permissive may inadvertently expose resources within the VPC to unintended principals or external threats.
Private Endpoint Policies Permit Access by Unintended Principals
CCC.VPC.TH05
Related Capabilities
| ID | Title | Description |
|---|---|---|
| CCC.VPC.CP17 | Private Endpoints | The service can be configured with private endpoints that allow resources within the virtual network to reach other cloud services without traversing the public internet. |
Related Controls
| ID | Title | Description |
|---|---|---|
| CCC.VPC.CN05 | Restrict Private Endpoints to Authorized Targets and Principals | Ensure that private endpoints only reach resources inside the trust perimeter and only serve authorized principals, so that an endpoint cannot become a path for data exfiltration or unauthorized access. |