standard
turbot/aws_compliance

Pipeline: Detect & correct VPC security groups allowing ingress to port 445

Detect security group rules that allow ingress from 0.0.0.0/0 or ::/0 to port 445 and then revoke security group rule.

Run the pipeline

To run this pipeline from your terminal:

flowpipe pipeline run aws_compliance.pipeline.detect_and_correct_vpc_security_groups_allowing_ingress_to_port_445

Use this pipeline

To call this pipeline from your pipeline, use a step:

step "pipeline" "step_name" {
pipeline = aws_compliance.pipeline.detect_and_correct_vpc_security_groups_allowing_ingress_to_port_445
}

Params

NameTypeRequiredDescriptionDefault
database
connection.steampipe
YesDatabase connection string.connection.steampipe.default
notifier
notifier
YesThe name of the notifier to use for sending notification messages.notifier.default
notification_level
string
verbose, info, error
YesThe verbosity level of notification messages to send.info
approvers
list(notifier)
YesList of notifiers to be used for obtaining action/approval decisions.notifier.default
default_action
string
notify, skip, revoke_security_group_rule
YesThe default action to use when there are no approvers.notify
enabled_actions
list(string)
skip, revoke_security_group_rule
YesThe list of enabled actions approvers can select.
[
"skip",
"revoke_security_group_rule"
]

Outputs

This pipeline has no outputs.

Tags

category = Compliance
mod = aws
recommended = true
service = AWS/VPC