Control: AWS > NIST 800-53 > VPC > VPC route table should restrict public access to IGW

Ensure if there are public routes in the route table to an Internet Gateway (IGW). The rule is non complaint if a route to an IGW has a destination CIDR block of '0.0.0.0/0' or '::/0'.

Resource Types

This control targets the following resource types:

AWS > VPC > Route Table

In Your Workspace

Controls by Resource report
Controls by Control Type report

Developers

Control Type URI

tmod:@turbot/aws-nist-800-53#/control/types/vpcRouteTableRestrictPublicAccessToIgw

Category URI

tmod:@turbot/turbot#/control/categories/complianceNist80053

GraphQL

query controlType(id: "tmod:@turbot/aws-nist-800-53#/control/types/vpcRouteTableRestrictPublicAccessToIgw") { … }

query controls(filter: "controlTypeId:'tmod:@turbot/aws-nist-800-53#/control/types/vpcRouteTableRestrictPublicAccessToIgw'") { … }

CLI

Get Controls

turbot graphql controls --filter "controlTypeId:tmod:@turbot/aws-nist-800-53#/control/types/vpcRouteTableRestrictPublicAccessToIgw"