Back to Checks
e2enetworks

E2E Networks nodes do not have a public IP assigned

node_public_ip_not_assigned
Service: nodeSeverity: medium
OfficialBuilt-inVerified
Categories:internet-exposed
Resource Type:NotDefined

E2E Networks nodes should not be assigned a public IP address, keeping compute instances off the public internet unless inbound access is explicitly required.

Prowler logoProwlerprowler-provider-e2enetworks

Risk

Nodes with public IP addresses are directly reachable from the internet, expanding the attack surface and increasing exposure to unauthorized access attempts.

Run this check with Prowler

Run in Prowler Cloud
Run
prowler e2enetworks --checks node_public_ip_not_assigned

Recommendation

Remove public IP addresses from nodes that do not require inbound internet access and reach them over private networking.

Check Code

from prowler.lib.check.models import Check, CheckReportE2eNetworks
from prowler.providers.e2enetworks.services.node.node_client import node_client


class node_public_ip_not_assigned(Check):
    """Check if E2E Networks nodes do not have a public IP assigned."""

    def execute(self) -> list[CheckReportE2eNetworks]:
        findings = []
        for node in node_client.nodes:
            report = CheckReportE2eNetworks(metadata=self.metadata(), resource=node)
            report.status = "PASS"
            report.status_extended = f"Node {node.name} does not have a public IP."
            if node.has_public_ip:
                report.status = "FAIL"
                report.status_extended = f"Node {node.name} has a public IP assigned."
            findings.append(report)
        return findings

References