Ensure Tencent Cloud mysql instances do not enable access from public networks
Description
This policy checks whether Tencent Cloud MySQL instances allow access from public networks. Enabling public access to MySQL instances can expose them to unauthorized access and potential attacks. It is recommended to restrict access to MySQL instances to only trusted sources. By disabling public access, the risk of data breaches and other security threats can be significantly reduced.
Code Example
terraform
resource "tencentcloud_mysql_instance" "example" {
internet_service = 0
}Remediation
Ensure the MySQL instance does not allow public access by setting internet_service to 0.
Rule Details
| Field | Value |
|---|---|
| ID | IAC-1326 |
| Severity | MEDIUM |
| IaC Type | Terraform |
| Frameworks | tencentcloud_mysql_instance |
| Checkov ID | CKV_TC_9 |