Evaluates whether the peer account ID of an Express Connect router interface and the account ID of the current resources reside in the same resource directory. If they do, the evaluation result is Compliant. This rule applies only to enterprises with global account groups created in Cloud Config.
Scenarios
Cross-account interconnection involves complex access permission control that may cause security compliance issues. Use accounts in the same resource directory to improve the security and compliance of cross-account interconnection.
Risk level
Default risk level: high.
You can change the risk level based on your business requirements.
Compliance evaluation logic
-
If the peer account ID of the Express Connect router interface and the account ID of the current resources reside in the same resource directory, the evaluation result is Compliant.
-
If the peer account ID of the Express Connect router interface and the account ID of the current resources do not reside in the same resource directory, the evaluation result is Non-compliant.
Rule details
|
Item |
Description |
|
Rule name |
express-connect-opposite-interface-owner-check |
|
Rule ID |
|
|
Tag |
RD |
|
Automatic remediation |
Not supported |
|
Trigger type |
Periodic execution |
|
Evaluation frequency |
Every 24 hours |
|
Supported resource type |
Router interface |
|
Input parameter |
None |