Metadata

Id: terraform-nifcloud-db-has-public-access

Provider: Nifcloud

Platform: Terraform

Severity: High

Category: Access Control

Learn More

• Provider Reference

Description

The RDB instance is configured to allow public network access. This rule detects nifcloud_db_instance resources where publicly_accessible is set to true and reports an IncorrectValue issue; network access should be limited to the minimum required for the application to function. Report attributes: documentId, resourceType, resourceName, searchKey, issueType, keyExpectedValue, keyActualValue.

Compliant Code Examples

resource "nifcloud_db_instance" "negative" {
  identifier          = "example"
  instance_class      = "db.large8"
  publicly_accessible = false
}

Non-Compliant Code Examples

resource "nifcloud_db_instance" "positive" {
  identifier          = "example"
  instance_class      = "db.large8"
  publicly_accessible = true
}