Skip to main content

SLB Instance No Public IP

ID: rule:aliyun:slb-no-public-ip
Severity: medium
IaC Types: ROS, Terraform

Description​

SLB instances should not have public IP addresses to reduce attack surface.

Reason for Violation​

Publicly accessible SLB instances increase the attack surface and may expose services to unwanted internet traffic.

Recommendation​

Set address_type to "intranet" for internal services.

Resource Types​

  • ROS: ALIYUN::SLB::LoadBalancer
  • Terraform: alicloud_slb_load_balancer