Redshift is deployed outside of a VPC misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AWS_154
Category - Subcategory	Public Exposure - VPC VCN VNet
Provider	AWS
Severity	LOW
Framework	CloudFormation, Serverless, Terraform, Terraform Plan

Impact

A VPC is a virtual network in the AWS cloud that is isolated from other virtual networks. When you deploy Redshift in a VPC, you can control the inbound and outbound network traffic to and from your Redshift cluster using security groups and network access control lists (NACLs). This can help to improve the security of your Redshift cluster and protect it from unauthorized access or attacks.

How to Fix

Resource: AWS::Redshift::Cluster

• Arguments: Properties.ClusterSubnetGroupName [source,go]

---

Type: "AWS::Redshift::Cluster" Properties: ...

• ClusterSubnetGroupName: "subnet-ebd9cead"

---