Skip to content

Ensure Tencent Cloud mysql instances do not enable access from public networks

Description

This policy checks whether Tencent Cloud MySQL instances allow access from public networks. Enabling public access to MySQL instances can expose them to unauthorized access and potential attacks. It is recommended to restrict access to MySQL instances to only trusted sources. By disabling public access, the risk of data breaches and other security threats can be significantly reduced.

Code Example

terraform
resource "tencentcloud_mysql_instance" "example" {
  internet_service = 0
}

Remediation

Ensure the MySQL instance does not allow public access by setting internet_service to 0.

Rule Details

FieldValue
IDIAC-1326
SeverityMEDIUM
IaC TypeTerraform
Frameworkstencentcloud_mysql_instance
Checkov IDCKV_TC_9

References