Amazon_VPC_5

Ensure routing tables for VPC peering are 'least access'

Description

Once a VPC peering connection is estalished, routing tables must be updated to establish any connections between the peered VPCs. These routes can be as specific as desired even peering a VPC to only a single host on the other side of the connection.

Remediation

Remove and add route table entries to ensure that the least number of subnets or hosts as is required to accomplish the purpose for peering are routable.
Via CLI:

  1. For each <route_table_id> containing routes non compliant with your routing policy
    (which grants more than desired least access”), delete the non compliant route:
    aws ec2 delete-route –route-table-id &lt

Service

VPC

Severity

High

Compliance

Mapping

We are now live on AWS Marketplace.
The integrated view of your cloud infrastructure is now easier than ever!