Back to Checks
The nas instance has common private network
NIF-0013
Service: nasSeverity: low
OfficialBuilt-inVerified
When handling sensitive data between servers, please consider using a private LAN to isolate the private side network from the shared network.
Run this check with Prowler
Run in Prowler CloudRun
prowler iac --checks NIF-0013Recommendation
Use private LAN
Check Code
# METADATA
# title: The nas instance has common private network
# description: |
# When handling sensitive data between servers, please consider using a private LAN to isolate the private side network from the shared network.
# scope: package
# schemas:
# - input: schema["cloud"]
# related_resources:
# - https://pfs.nifcloud.com/service/plan.htm
# custom:
# id: NIF-0013
# long_id: nifcloud-nas-no-common-private-nas-instance
# aliases:
# - AVD-NIF-0013
# - no-common-private-nas-instance
# - nifcloud-nas-no-common-private-nas-instance
# provider: nifcloud
# service: nas
# severity: LOW
# recommended_action: Use private LAN
# input:
# selector:
# - type: cloud
# subtypes:
# - service: nas
# provider: nifcloud
# examples: checks/cloud/nifcloud/nas/no_common_private_nas_instance.yaml
package builtin.nifcloud.nas.nifcloud0013
import rego.v1
deny contains res if {
some instance in input.nifcloud.nas.nasinstances
instance.networkid.value == "net-COMMON_PRIVATE"
res := result.new("The nas instance has common private network", instance.networkid)
}