Skip to content

Default VPC is planned to be provisioned

Description

A default VPC is a VPC that is created for your AWS account when you create an AWS account. It includes a default security group and a default network access control list (NACL). Default VPCs have some limitations that might not be suitable for all use cases. Therefore, if you have specific requirements for your VPC, such as custom IP address ranges, support for PrivateLink or Transit Gateway, or the ability to delete the VPC, it might be more appropriate to create a custom VPC instead of using the default VPC.

Code Example

go
resource "aws_default_vpc" "default" {
            tags = {
                Name = "Default VPC"
            }
        }

Remediation

Terraform

It is recommended for this resource to not be configured

Rule Details

FieldValue
IDIAC-0198
SeverityLOW
IaC TypeTerraform
FrameworksTerraform, TerraformPlan
Checkov IDCKV_AWS_148

References