security_monkey icon indicating copy to clipboard operation
security_monkey copied to clipboard

Feature Request: Audit Network ACLs (NACL) in VPC

Open rbeede opened this issue 8 years ago • 1 comments

It'd be nice if there was an audit check to track changes to NACLs in a VPC.

An alert would be if an ALLOW from source 0.0.0.0/0 was added.

Another alert may be if any of the ingress or egress rules were changed.

rbeede avatar Sep 01 '16 20:09 rbeede

A VPC Network ACL watcher was added in #411.

Now we just need an Auditor.

scriptsrc avatar Sep 21 '16 00:09 scriptsrc