standard
turbot/aws_compliance
Get Involved
Version
Pipeline: Correct default VPC security groups allowing ingress egress
Revoke security group rule from the default security group to restrict incoming and outgoing internet traffic.
Run the pipeline
To run this pipeline from your terminal:
flowpipe pipeline run aws_compliance.pipeline.correct_vpc_default_security_groups_allowing_ingress_egress \ --arg 'items=<list(object({ title = string, group_id = string, security_group_rule_id = string, ip_protocol = string, from_port = number, to_port = number, cidr_ipv4 = string, cidr_ipv6 = string, region = string, type = string, conn = string }))>'
Use this pipeline
To call this pipeline from your pipeline, use a step:
step "pipeline" "step_name" { pipeline = aws_compliance.pipeline.correct_vpc_default_security_groups_allowing_ingress_egress args = { items = <list(object({ title = string, group_id = string, security_group_rule_id = string, ip_protocol = string, from_port = number, to_port = number, cidr_ipv4 = string, cidr_ipv6 = string, region = string, type = string, conn = string }))> }}
Params
Name | Type | Required | Description | Default |
---|---|---|---|---|
items | list(object({ title = string, group_id = string, security_group_rule_id = string, ip_protocol = string, from_port = number, to_port = number, cidr_ipv4 = string, cidr_ipv6 = string, region = string, type = string, conn = string })) | Yes | A collection of detected resources to run corrective actions against. | - |
notifier | notifier | Yes | The name of the notifier to use for sending notification messages. | notifier.default |
notification_level | string verbose , info , error | Yes | The verbosity level of notification messages to send. | info |
approvers | list(notifier) | Yes | List of notifiers to be used for obtaining action/approval decisions. | notifier.default |
default_action | string notify , skip , revoke_security_group_rule | Yes | The default action to use when there are no approvers. | notify |
enabled_actions | list(string) skip , revoke_security_group_rule | Yes | The list of enabled actions approvers can select. |
|
Outputs
This pipeline has no outputs.
Tags
category = Compliance
folder = Internal
mod = aws
service = AWS/VPC