Back to Checks
iac

The instance has common private network

NIF-0005
Service: computingSeverity: low
OfficialBuilt-inVerified

When handling sensitive data between servers, please consider using a private LAN to isolate the private side network from the shared network.

Run this check with Prowler

Run in Prowler Cloud
Run
prowler iac --checks NIF-0005

Recommendation

Use private LAN

Check Code

# METADATA
# title: The instance has common private network
# description: |
#   When handling sensitive data between servers, please consider using a private LAN to isolate the private side network from the shared network.
# scope: package
# schemas:
#   - input: schema["cloud"]
# related_resources:
#   - https://pfs.nifcloud.com/service/plan.htm
# custom:
#   id: NIF-0005
#   long_id: nifcloud-computing-no-common-private-instance
#   aliases:
#     - AVD-NIF-0005
#     - no-common-private-instance
#     - nifcloud-computing-no-common-private-instance
#   provider: nifcloud
#   service: computing
#   severity: LOW
#   recommended_action: Use private LAN
#   input:
#     selector:
#       - type: cloud
#         subtypes:
#           - service: computing
#             provider: nifcloud
#   examples: checks/cloud/nifcloud/computing/no_common_private_instance.yaml
package builtin.nifcloud.computing.nifcloud0005

import rego.v1

deny contains res if {
	some instance in input.nifcloud.computing.instances
	some ni in instance.networkinterfaces
	ni.networkid.value == "net-COMMON_PRIVATE"
	res := result.new("The instance has common private network", ni.networkid)
}