AWS Transfer Server is publicly exposed

Description

By ensuring that your Azure Transfer Server is not public, you can help protect your data from unauthorized access or tampering. Public Azure Transfer Servers are accessible over the internet, which can make them vulnerable to external threats such as hackers or malware. By making it private, you can help ensure that only authorized users can access the data.

Code Example

resource "aws_transfer_server" "test" {
  + endpoint_type = "VPC"
    protocols   = ["SFTP"]
}

Remediation

Terraform

• Resource: aws_transfer_server
• Arguments: endpoint_type

Rule Details

Field	Value
ID	IAC-0213
Severity	MEDIUM
IaC Type	Cloudformation
Frameworks	CloudFormation, Terraform, TerraformPlan, Serverless
Checkov ID	CKV_AWS_164

References

• Checkov Rule

---