Class: EC2NetworkAclEntryPortRangeRule
- Defined in:
- lib/cfn-nag/custom_rules/EC2NetworkAclEntryPortRangeRule.rb
Instance Method Summary collapse
Methods inherited from BaseRule
Instance Method Details
#audit_impl(cfn_model) ⇒ Object
19 20 21 22 23 24 25 26 |
# File 'lib/cfn-nag/custom_rules/EC2NetworkAclEntryPortRangeRule.rb', line 19 def audit_impl(cfn_model) violating_network_acl_entries = cfn_model.resources_by_type('AWS::EC2::NetworkAclEntry') .select do |network_acl_entry| violating_network_acl_entries?(network_acl_entry) end violating_network_acl_entries.map(&:logical_resource_id) end |
#rule_id ⇒ Object
15 16 17 |
# File 'lib/cfn-nag/custom_rules/EC2NetworkAclEntryPortRangeRule.rb', line 15 def rule_id 'W67' end |
#rule_text ⇒ Object
7 8 9 |
# File 'lib/cfn-nag/custom_rules/EC2NetworkAclEntryPortRangeRule.rb', line 7 def rule_text 'TCP/UDP protocol NetworkACL entries possibly should not allow all ports.' end |