Pipeline: Correct VPC security groups allowing ingress to remote server administration ports IPv4

Revoke VPC security group rules allowing ingress to remote server administration ports IPv4.

Run the pipeline

To run this pipeline from your terminal:

flowpipe pipeline run aws_compliance.pipeline.correct_vpc_security_groups_allowing_ingress_to_remote_server_administration_ports_ipv4 \
  --arg 'items=<list(object({
      title                  = string,
      group_id               = string,
      security_group_rule_id = string,
      ip_protocol            = string,
      from_port              = number,
      to_port                = number,
      cidr_ipv4              = string,
      cidr_ipv6              = string,
      region                 = string,
      conn                   = string
    }))>'

Use this pipeline

To call this pipeline from your pipeline, use a step:

step "pipeline" "step_name" {
  pipeline = aws_compliance.pipeline.correct_vpc_security_groups_allowing_ingress_to_remote_server_administration_ports_ipv4  
  args = {
    items = <list(object({
      title                  = string,
      group_id               = string,
      security_group_rule_id = string,
      ip_protocol            = string,
      from_port              = number,
      to_port                = number,
      cidr_ipv4              = string,
      cidr_ipv6              = string,
      region                 = string,
      conn                   = string
    }))>
  }
}

Triggers

Detect & correct VPC security groups allowing ingress to remote server administration ports IPv4

Params

Name	Type	Required	Description	Default
items	list(object({ title = string, group_id = string, security_group_rule_id = string, ip_protocol = string, from_port = number, to_port = number, cidr_ipv4 = string, cidr_ipv6 = string, region = string, conn = string }))	Yes	A collection of detected resources to run corrective actions against.	-
notifier	notifier	Yes	The name of the notifier to use for sending notification messages.	`notifier.default`
notification_level	string `verbose`, `info`, `error`	Yes	The verbosity level of notification messages to send.	`info`
approvers	list(notifier)	Yes	List of notifiers to be used for obtaining action/approval decisions.	`notifier.default`
default_action	string `notify`, `skip`, `revoke_security_group_rule`	Yes	The default action to use when there are no approvers.	`notify`
enabled_actions	list(string) `skip`, `revoke_security_group_rule`	Yes	The list of enabled actions approvers can select.	`[ "skip", "revoke_security_group_rule" ]`

Outputs

This pipeline has no outputs.

Pipeline: Correct VPC security groups allowing ingress to remote server administration ports IPv4

Run the pipeline

Use this pipeline

Triggers

Params

Outputs

Tags