# Mapped value is public

An Fn::FindInMap result of 0.0.0.0/0 or ::/0 used as an ingress CIDR.

Area: Security

## What you need to supply

The mapping name, top-level key, and second key are literals, and the Mappings entry in the same submission is a literal.

## If it reports a finding

High severity. The suggested next step is to map the ingress CIDR to an approved range.

## What this does not prove

A mapped 10.1.0.0/16 is not this finding. An unknown key or a missing map stays unresolved.

## Mapping that this check is written to notice

```
Mappings:
  Net:
    Public:
      Cidr: 0.0.0.0/0
Resources:
  Sg:
    Type: AWS::EC2::SecurityGroup
    Properties:
      SecurityGroupIngress:
        - CidrIp:
            Fn::FindInMap: [Net, Public, Cidr]
```

Reading this page does not submit infrastructure. The HTML page is https://skaleagents.com/checks/mapped-value-is-public.