Ensure Inbound Firewall Policy is not set to ACCEPT

Description

This policy checks whether the inbound firewall policy is set to ACCEPT, which could allow unauthorized access to the network. It is essential to restrict inbound traffic to only necessary sources to prevent potential security breaches. The rule checks the 'inbound_policy' attribute of the 'linode_firewall' resource and ensures it is set to 'DROP' to block all incoming traffic by default.

Code Example

resource "linode_firewall" "example" {
  inbound_policy = "DROP"
}

Remediation

Update the 'inbound_policy' attribute of the 'linode_firewall' resource to 'DROP' to block all incoming traffic by default.

Rule Details

Field	Value
ID	IAC-1202
Severity	HIGH
IaC Type	Terraform
Frameworks	linode_firewall
Checkov ID	CKV_LIN_5

References

• Checkov Rule

---