All Products
Search
Document Center

Cloud Config:vpc-network-acl-unused-check

Last Updated:Jun 08, 2026

A VPC network ACL is compliant if at least one resource is associated with it.

Scenarios

Associate a network ACL with a vSwitch to control traffic for network instances in that vSwitch.

Risk level

Default risk level: low.

You can change the risk level when you apply this rule.

Compliance evaluation logic

A network ACL is compliant if at least one resource is associated with it.

Rule details

Parameter

Description

Rule Template Name

vpc-network-acl-unused-check

Rule Template Identifier

vpc-network-acl-unused-check

Tag

NetworkAcl

Automatic remediation

Not supported

Invoke Type

Configuration Change

Supported resource type

Network ACL (ACS::VPC::NetworkAcl)

Input parameter

N/A

Non-compliance remediation

Associate at least one resource with each network ACL. Create and manage a network ACL.