Skip to content

Redshift is deployed outside of a VPC

Description

A VPC is a virtual network in the AWS cloud that is isolated from other virtual networks. When you deploy Redshift in a VPC, you can control the inbound and outbound network traffic to and from your Redshift cluster using security groups and network access control lists (NACLs). This can help to improve the security of your Redshift cluster and protect it from unauthorized access or attacks.

Code Example

go
resource "aws_redshift_cluster" "pass" {
    ...
+ cluster_subnet_group_name="subnet-ebd9cead"
}

Remediation

Terraform

  • Resource: aws_redshift_cluster
  • Arguments: cluster_subnet_group_name

Rule Details

FieldValue
IDIAC-0203
SeverityLOW
IaC TypeCloudformation
FrameworksCloudFormation, Terraform, TerraformPlan, Serverless
Checkov IDCKV_AWS_154

References