Security / Public reference

Public input on a Terraform module

A Terraform module argument set to 0.0.0.0/0 or ::/0, unless the argument is egress, destination, or ipv6 egress, or a module argument publicly_accessible = true.

What you need to supply

The module block in the submitted Terraform. The module body is not loaded and the module source is not fetched.

If it reports a finding

High severity. The suggested next step is to replace the public input with an approved range or turn public access off.

What this does not prove

A module with cidr = "10.0.0.0/24" is not this finding. A public value that appears only in a comment is not this finding.

Module argument that this check is written to notice

module "edge" {
  source = "./modules/edge"
  cidr = "0.0.0.0/0"
}

All review checks. Reading this page does not submit your infrastructure.