Evaluates whether a resource uses a NAT Gateway in the same zone. A resource that uses a NAT Gateway in a different zone is considered non-compliant.
Risk level
Default risk level: High.
You can change the risk level based on your business requirements.
Detection logic
-
A resource is considered compliant if it uses a NAT Gateway located in the same zone.
Rule details
|
Parameter |
Description |
|
Rule name |
NAT Gateway zone independence |
|
Rule identifier |
|
|
Tags |
NAT, NatGateway |
|
Automatic remediation |
Not supported |
|
Rule trigger |
Periodic |
|
Trigger frequency |
24 hours |
|
Supported resource types |
ACS::NAT::NatGateway |
|
Input parameters |
None |
Remediation guide
To remediate non-compliant resources, see Use the SNAT feature of an Internet NAT gateway to access the Internet.