Skip to main content

Networking / VPC / Threats / DEV

Overly Permissive VPC Endpoint Policies

CCC.VPC.TH05

VPC Endpoint policies that are overly permissive may inadvertently expose resources within the VPC to unintended principals or external threats.

Related Capabilities

IDTitleDescription
CCC.VPC.CP17VPC EndpointsAbility to allow secure, private connectivity between resources within a VPC and other services without the need for a public internet.

External Mappings

FrameworkIDRemarks
MITRE-ATT&CKT1078
MITRE-ATT&CKT1071