GCP Dataproc Clusters have public IPs misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_GCP_103
Category - Subcategory	Public Exposure - Database Endpoints
Provider	GCP
Severity	HIGH
Framework	Terraform

Impact

Ensure Dataproc Clusters do not have public IPs

How to Fix

Resource: google_dataproc_cluster

• Field: internal_ip_only [source,go]

---

resource "google_dataproc_cluster" "accelerated_cluster" { name = "my-cluster-with-gpu" region = "us-central1"

cluster_config { gce_cluster_config { zone = "us-central1-a"

• internal_ip_only = false

• internal_ip_only = true }

master_config { accelerators { accelerator_type = "nvidia-tesla-k80" accelerator_count = "1" } } } }