Policy Packs

guardrails-samples

This measure minimizes the attack surface, reduces the risk of unauthorized access and potential data breaches, and ensures that all external connectivity is tightly controlled and monitored through alternative, more secure methods.

Enforce AWS VPC Internet Gateways Are Deleted

main

vpc_internet_gateway_approved

Determine the action to take when an AWS VPC internet gateway is not approved based on `AWS &gt; VPC &gt; Internet Gateway &gt; Approved &gt; *` policies.&#92;n&#92;nThe Approved control checks the status of the defined Approved sub-policies for the resource. If the resource is not approved according to any of these policies, this control raises an alarm and takes the defined enforcement action.&#92;n&#92;nFor any enforcement actions that specify `if new`, e.g., `Enforce: Delete unapproved if new`, this control will only take the enforcement actions for resources created within the last 60 minutes.&#92;n&#92;nSee [Approved](https://turbot.com/guardrails/docs/concepts/guardrails/approved) for more information.&#92;n

internetGatewayApproved

AWS > VPC > Internet Gateway > Approved

vpc_internet_gateway_approved_usage

Determine whether the AWS VPC internet gateway is allowed to exist.&#92;n&#92;nThis policy will be evaluated by the Approved control. If an AWS VPC internet gateway is not approved, it will be subject to the action specified in the `AWS &gt; VPC &gt; Internet Gateway &gt; Approved` policy.&#92;n&#92;nSee [Approved](https://turbot.com/guardrails/docs/concepts/guardrails/approved) for more information.&#92;n

internetGatewayApprovedUsage

AWS > VPC > Internet Gateway > Approved > Usage

turbot_policy_setting.vpc_internet_gateway_approved

turbot_policy_setting.vpc_internet_gateway_approved_usage

Policy	Setting	Note
AWS > VPC > Internet Gateway > Approved	Check: Approved
AWS > VPC > Internet Gateway > Approved > Usage	Not approved

Policy Settings