CCC.VPC.C02: Limit Resource Creation in Public Subnet
Control ID:CCC.VPC.C02
Title:Limit Resource Creation in Public Subnet
Objective:Restrict the creation of resources in the public subnet with
direct access to the internet to minimize attack surfaces.
Control Family:
Network Security
Threats:
| ID | Title | Description |
|---|---|---|
| CCC.VPC.TH02 | Exposure of Resources to Public Internet | Assignment of external IP addresses to resources exposes resources to the public internet, increasing the risk of attacks such as brute force, exploitation of vulnerabilities, or unauthorized access. |
NIST CSF:
PR.AC-3
Control Mappings
Test Requirements
CCC.VPC.C02.TR01:When a resource is created in a public subnet, that resource
MUST NOT be assigned an external IP address by default.
TLP:
tlp_red