IBM Cloud Virtual Private Cloud (VPC) classic access is enabled in Terraform

Description

This policy ensures that VPC classic access is disabled. It checks for configurations in your cloud infrastructure to confirm that virtual private cloud (VPC) instances are not allowing classic access. Classic access can pose several security risks as it may enable connections from legacy environments that lack modern security features and controls. Disabling this access minimizes the potential attack surface and enhances the overall security posture of your infrastructure.

Code Example

resource "ibm_is_vpc" "secure_vpc" {
  ...
+  classic_access = false
}

Remediation

Terraform

• Resource: ibm_is_vpc
• Arguments: classic_access

Ensure that the `classic_access` attribute in the ibm_is_vpc resource is set to `false`, preventing access from legacy environments.

In this example, the `classic_access` attribute is set to `false` in the ibm_is_lb resource to disable classic access to the VPC.

Rule Details

Field	Value
ID	IAC-1074
Severity	HIGH
IaC Type	Terraform
Frameworks	Terraform, TerraformPlan
Checkov ID	CKV2_IBM_2

References

• Checkov Rule

---