Security / Public reference

Mapped value is public

An Fn::FindInMap result of 0.0.0.0/0 or ::/0 used as an ingress CIDR.

What you need to supply

The mapping name, top-level key, and second key are literals, and the Mappings entry in the same submission is a literal.

If it reports a finding

High severity. The suggested next step is to map the ingress CIDR to an approved range.

What this does not prove

A mapped 10.1.0.0/16 is not this finding. An unknown key or a missing map stays unresolved.

Mapping that this check is written to notice

Mappings:
  Net:
    Public:
      Cidr: 0.0.0.0/0
Resources:
  Sg:
    Type: AWS::EC2::SecurityGroup
    Properties:
      SecurityGroupIngress:
        - CidrIp:
            Fn::FindInMap: [Net, Public, Cidr]

All review checks. Reading this page does not submit your infrastructure.