Security / Public reference

Public database

A database that enables public network access in Terraform, CloudFormation, Kubernetes, Pulumi YAML, a Pulumi program, or Docker Compose.

What you need to supply

The infrastructure text you paste or send from your editor. The check does not connect to the database.

If it reports a finding

High severity. The suggested next step is to disable public access and connect through a private network.

What this does not prove

A public setting that is computed outside the submitted text is not evaluated. No finding does not prove the database is private.

Setting that this check is written to notice

resource "aws_db_instance" "app" {
  publicly_accessible = true
}

Proposed change

When this line appears once, the review proposes this change.

publicly_accessible = true becomes publicly_accessible = false

All review checks. Reading this page does not submit your infrastructure.