Back to Checks
The db instance has common private network
NIF-0010
Service: rdbSeverity: low
OfficialBuilt-inVerified
When handling sensitive data between servers, please consider using a private LAN to isolate the private side network from the shared network.
Run this check with Prowler
Run in Prowler CloudRun
prowler iac --checks NIF-0010Recommendation
Use private LAN
Check Code
# METADATA
# title: The db instance has common private network
# description: |
# When handling sensitive data between servers, please consider using a private LAN to isolate the private side network from the shared network.
# scope: package
# schemas:
# - input: schema["cloud"]
# related_resources:
# - https://pfs.nifcloud.com/service/plan.htm
# custom:
# id: NIF-0010
# long_id: nifcloud-rdb-no-common-private-db-instance
# aliases:
# - AVD-NIF-0010
# - no-common-private-db-instance
# - nifcloud-rdb-no-common-private-db-instance
# provider: nifcloud
# service: rdb
# severity: LOW
# recommended_action: Use private LAN
# input:
# selector:
# - type: cloud
# subtypes:
# - service: rdb
# provider: nifcloud
# examples: checks/cloud/nifcloud/rdb/no_common_private_db_instance.yaml
package builtin.nifcloud.rdb.nifcloud0010
import rego.v1
deny contains res if {
some db in input.nifcloud.rdb.dbinstances
db.networkid.value == "net-COMMON_PRIVATE"
res := result.new("The db instance has common private network.", db.networkid)
}