Skip to main content

NAS Access Group IP Restriction

ID: rule:aliyun:nas-access-group-public-access-check
Severity: high
IaC Types: ROS, Terraform

Description​

Ensures NAS access rules do not allow 0.0.0.0/0.

Reason for Violation​

An open NAS access rule can lead to unauthorized data access over the internet.

Recommendation​

Restrict NAS access rules to specific trusted VPC IP ranges.

Resource Types​

  • ROS: ALIYUN::NAS::AccessRule
  • Terraform: alicloud_nas_access_rule