Vertex AI endpoint is public misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC2_GCP_33
Category - Subcategory	Public Exposure - APIs
Provider	GCP
Severity	MEDIUM
Framework	Terraform, Terraform Plan

Impact

This rule is checking to make sure that the Vertex AI endpoint is private. This is important because if the endpoint is public, it could be easily accessible to anyone on the internet, increasing the risk of unauthorized access and potential data breaches. By ensuring that the endpoint is private, it helps in safeguarding sensitive data and mitigating potential security threats.

How to Fix

Resource: google_vertex_ai_endpoint

• Arguments: network

To fix this issue, make sure there is a network attached to your Vertex AI endpoint. This makes sure that the Vertex AI endpoint remains private and not exposed to public internet. [source,go]

resource "google_vertex_ai_endpoint" "example" { ... network = google_service_networking_connection.private_vpc_connection.id }