AWS NAT Gateways are not utilized for the default route misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC2_AWS_35
Category - Subcategory	Public Exposure - VPC VCN VNet
Provider	AWS
Severity	LOW
Framework	Terraform

Impact

Using Amazon NAT Gateways (AWS NAT Gateways) for the default route can help improve the security and performance of your network. NAT Gateways allow you to route traffic from your Amazon Virtual Private Cloud (Amazon VPC) to the Internet, while also hiding the IP addresses of your instances from the Internet. This can help protect your instances from potential threats such as spoofing attacks and port scans.

How to Fix

[source,go]

resource "aws_vpc" "example" { cidr_block = "10.0.0.0/16" }

resource "aws_internet_gateway" "example" { vpc_id = aws_vpc.example.id }

resource "aws_route_table" "aws_route_table_ok_1" { vpc_id = aws_vpc.example.id

route { cidr_block = "0.0.0.0/0" gateway_id = aws_internet_gateway.example.id } }