AWS Redshift cluster is publicly accessible

Description

We recommend you ensure your Amazon Redshift Clusters are not publicly accessible.

Code Example

resource "aws_redshift_cluster" "default" {
  cluster_identifier = "tf-redshift-cluster"
  database_name      = "mydb"
  master_username    = "foo"
  master_password    = "Mustbe8characters"
  node_type          = "dc1.large"
  cluster_type       = "single-node"
+ publicly_accessible= "false"
}

Remediation

Terraform

• Resource: aws_redshift_cluster
• Arguments: publicly_accessible

Rule Details

Field	Value
ID	IAC-0140
Severity	LOW
IaC Type	Cloudformation
Frameworks	Terraform
Checkov ID	CKV_AWS_87

References

• Checkov Rule

---