AWS route table with VPC peering overly permissive to all traffic misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC2_AWS_44
Category - Subcategory	Public Exposure - VPC VCN VNet
Provider	AWS
Severity	LOW
Framework	Terraform
Mapped CSPM/KSPM Rule	307c7a74-7fed-4087-b0b0-2215d690267b

Impact

This rule identifies VPC route tables with VPC peering connection which are overly permissive to all traffic. Being highly selective in peering routing tables is a very effective way of minimizing the impact of breach as resources outside of these routes are inaccessible to the peered VPC.

How to Fix

[source,go]

{ "resource "aws_route" "aws_route_pass_1" { route_table_id = "rtb-4fbb3ac4" destination_cidr_block = "10.0.1.0/22" vpc_peering_connection_id = "pcx-45ff3dc1" }

", }