Back to Checks
iac

The nas instance has common private network

NIF-0013
Service: nasSeverity: low
OfficialBuilt-inVerified

When handling sensitive data between servers, please consider using a private LAN to isolate the private side network from the shared network.

Run this check with Prowler

Run in Prowler Cloud
Run
prowler iac --checks NIF-0013

Recommendation

Use private LAN

Check Code

# METADATA
# title: The nas instance has common private network
# description: |
#   When handling sensitive data between servers, please consider using a private LAN to isolate the private side network from the shared network.
# scope: package
# schemas:
#   - input: schema["cloud"]
# related_resources:
#   - https://pfs.nifcloud.com/service/plan.htm
# custom:
#   id: NIF-0013
#   long_id: nifcloud-nas-no-common-private-nas-instance
#   aliases:
#     - AVD-NIF-0013
#     - no-common-private-nas-instance
#     - nifcloud-nas-no-common-private-nas-instance
#   provider: nifcloud
#   service: nas
#   severity: LOW
#   recommended_action: Use private LAN
#   input:
#     selector:
#       - type: cloud
#         subtypes:
#           - service: nas
#             provider: nifcloud
#   examples: checks/cloud/nifcloud/nas/no_common_private_nas_instance.yaml
package builtin.nifcloud.nas.nifcloud0013

import rego.v1

deny contains res if {
	some instance in input.nifcloud.nas.nasinstances
	instance.networkid.value == "net-COMMON_PRIVATE"
	res := result.new("The nas instance has common private network", instance.networkid)
}