Medium
EC2
Regional
EC2 VPC Block Public Access settings should block internet gateway traffic
FSBP
Description
Verifies that VPC Block Public Access settings are configured to block internet gateway traffic.
Remediation
To enable VPC Block Public Access for internet gateway traffic, you need to configure the InternetGatewayBlockMode setting.
Steps
- Open the Amazon VPC console
- Navigate to 'Account settings' in the left navigation pane
- Select 'Block public access settings'
- Configure the 'Internet gateway' setting
- Choose either 'Block ingress' or 'Block bidirectional' based on your requirements
- Save the changes to enable VPC BPA for internet gateway traffic
Compliance
FSBP