Checks whether Internet access is disabled for Function Compute services. A service with Internet access disabled is evaluated as compliant.
Scenarios
Accessing Function Compute services over the Internet increases security risks. Use private networks to access Function Compute services instead.
Risk level
Default risk level: medium.
You can change the risk level based on your business requirements when you apply this rule.
Compliance evaluation logic
- If Internet access is disabled for the Function Compute service, the evaluation result is Compliant.
- If Internet access is enabled for the Function Compute service, the evaluation result is Non-compliant. For more information about how to remediate an incompliant configuration, see the "Incompliance remediation" section of this topic.
Rule details
| Item | Description |
| Rule name | fc-service-internet-access-disable |
| Rule identifier | fc-service-internet-access-disable |
| Tag | FC and Log |
| Automatic remediation | Not supported |
| Trigger type | Configuration change |
| Supported resource type | Function Compute services |
| Input parameter | None |
Incompliance remediation
Disable Internet access for Function Compute services and access them through private networks. For more information, see Configure logging.
该文章对您有帮助吗？