Skip to main content

FC Service Internet Access Disabled

ID: rule:aliyun:fc-service-internet-access-disable
Severity: medium

Description

Ensures that the Function Compute service has internet access disabled when it should only access internal resources.

Reason for Violation

Disabling internet access for FC services reduces the attack surface and potential for data exfiltration.

Recommendation

Disable internet access for the Function Compute service.

Resource Types

  • ALIYUN::FC::Service