Evaluates whether 0.0.0.0/0 is included in the IP address whitelist of an ApsaraDB for MongoDB instance.
Scenario
If 0.0.0.0/0 is in the IP address whitelist of an ApsaraDB for MongoDB instance, the instance is accessible from all CIDR blocks, which poses security risks. Exercise caution when you configure the IP address whitelist.
Risk level
Default risk level: high.
You can change the risk level when you apply this rule.
Compliance evaluation logic
- If 0.0.0.0/0 is not in the IP address whitelist of the ApsaraDB for MongoDB instance, the configuration is considered compliant.
- If 0.0.0.0/0 is in the IP address whitelist of the ApsaraDB for MongoDB instance, the configuration is considered non-compliant. To correct a non-compliant configuration, see Non-compliance remediation.
Rule details
| Item | Description |
| Rule name | mongodb-public-access-check |
| Rule ID | mongodb-public-access-check |
| Tag | MongoDB and VPC |
| Automatic remediation | Not supported |
| Trigger type | Configuration change |
| Supported resource type | ApsaraDB for MongoDB instance |
| Input parameter | None |
Non-compliance remediation
Remove 0.0.0.0/0 from the IP address whitelist of the ApsaraDB for MongoDB instance. For more information, see Modify a whitelist.