Policy Packs

guardrails-samples

This measure prevents any outbound internet traffic from private subnets, reducing the risk of data exfiltration, unauthorized access, and potential security breaches.

Enforce NAT Gateways Are Deleted

main

vpc_nat_gateway_approved

Determine the action to take when an AWS VPC nat gateway is not approved based on `AWS &gt; VPC &gt; NAT Gateway &gt; Approved &gt; *` policies.&#92;n&#92;nThe Approved control checks the status of the defined Approved sub-policies for the resource. If the resource is not approved according to any of these policies, this control raises an alarm and takes the defined enforcement action.&#92;n&#92;nFor any enforcement actions that specify `if new`, e.g., `Enforce: Delete unapproved if new`, this control will only take the enforcement actions for resources created within the last 60 minutes.&#92;n&#92;nSee [Approved](https://turbot.com/guardrails/docs/concepts/guardrails/approved) for more information.&#92;n

natGatewayApproved

AWS > VPC > NAT Gateway > Approved

vpc_nat_gateway_approved_usage

Determine whether the AWS VPC nat gateway is allowed to exist.&#92;n&#92;nThis policy will be evaluated by the Approved control. If an AWS VPC nat gateway is not approved, it will be subject to the action specified in the `AWS &gt; VPC &gt; NAT Gateway &gt; Approved` policy.&#92;n&#92;nSee [Approved](https://turbot.com/guardrails/docs/concepts/guardrails/approved) for more information.&#92;n

natGatewayApprovedUsage

AWS > VPC > NAT Gateway > Approved > Usage

turbot_policy_setting.vpc_nat_gateway_approved

turbot_policy_setting.vpc_nat_gateway_approved_usage

Policy	Setting	Note
AWS > VPC > NAT Gateway > Approved	Check: Approved
AWS > VPC > NAT Gateway > Approved > Usage	Not approved

Policy Settings