# Public input on a Terraform module

A Terraform module argument set to 0.0.0.0/0 or ::/0, unless the argument is egress, destination, or ipv6 egress, or a module argument publicly_accessible = true.

Area: Security

## What you need to supply

The module block in the submitted Terraform. The module body is not loaded and the module source is not fetched.

## If it reports a finding

High severity. The suggested next step is to replace the public input with an approved range or turn public access off.

## What this does not prove

A module with cidr = "10.0.0.0/24" is not this finding. A public value that appears only in a comment is not this finding.

## Module argument that this check is written to notice

```
module "edge" {
  source = "./modules/edge"
  cidr = "0.0.0.0/0"
}
```

Reading this page does not submit infrastructure. The HTML page is https://skaleagents.com/checks/public-input-on-a-terraform-module.