All Products
Search
Document Center

Cloud Config:NAT Gateway zone independence

Last Updated:Oct 20, 2025

A resource is considered compliant if it uses a NAT Gateway located in the same zone.

Risk level

Default risk level: High.

You can change the risk level as needed.

Detection logic

  • A resource is considered compliant if it uses a NAT Gateway located in the same zone.

Rule details

Parameter

Description

Rule name

NAT Gateway zone independence

Rule identifier

natgateway-az-independence

Tags

NAT, NatGateway

Automatic remediation

Not supported

Rule trigger

Periodic

Trigger frequency

24 hours

Supported resource types

ACS::NAT::NatGateway

Input parameters

None

Remediation guide

To remediate non-compliant resources, see Use the SNAT feature of an Internet NAT gateway to access the Internet.