Back to Checks
The elb has common private network
NIF-0019
Service: networkSeverity: low
OfficialBuilt-inVerified
When handling sensitive data between servers, please consider using a private LAN to isolate the private side network from the shared network.
Run this check with Prowler
Run in Prowler CloudRun
prowler iac --checks NIF-0019Recommendation
Use private LAN
Check Code
# METADATA
# title: The elb has common private network
# description: |
# When handling sensitive data between servers, please consider using a private LAN to isolate the private side network from the shared network.
# scope: package
# schemas:
# - input: schema["cloud"]
# related_resources:
# - https://pfs.nifcloud.com/service/plan.htm
# custom:
# id: NIF-0019
# long_id: nifcloud-network-no-common-private-elb
# aliases:
# - AVD-NIF-0019
# - no-common-private-elb
# - nifcloud-network-no-common-private-elb
# provider: nifcloud
# service: network
# severity: LOW
# recommended_action: Use private LAN
# input:
# selector:
# - type: cloud
# subtypes:
# - service: network
# provider: nifcloud
# examples: checks/cloud/nifcloud/network/no_common_private_elb.yaml
package builtin.nifcloud.network.nifcloud0019
import rego.v1
deny contains res if {
some elb in input.nifcloud.network.elasticloadbalancers
some ni in elb.networkinterfaces
ni.networkid.value == "net-COMMON_PRIVATE"
res := result.new("The elb has common private network", ni.networkid)
}