Skip to main content

🧠 AWS VPC Subnet Map Public IP On Launch is enabled - prod.logic.yaml 🟒

Flags​

Input Type​

TypeAPI NameExtractsExtract FilesLogic Files
πŸ”’πŸ“— AWS VPC SubnetCA10__CaAwsSubnet__c211

Uses​

Test Results πŸŸ’β€‹

Generated at: 2025-08-29T17:46:57.969199786Z Open

ResultIdCondition IndexCondition TextRuntime Error
🟒test1βœ”οΈ 99βœ”οΈ isDisappeared(CA10__disappearanceTime__c)βœ”οΈ null
🟒test2βœ”οΈ 199βœ”οΈ extract('CA10__mapPublicIpOnLaunch__c') == trueβœ”οΈ null
🟒test3βœ”οΈ 200βœ”οΈ otherwiseβœ”οΈ null

Generation​

FileMD5
Open/ce/ca/aws/vpc/disable-subnet-map-public-ip-on-launch/policy.yaml45E132D818308283FF5F4F9E811EECDE
Open/ce/ca/aws/vpc/disable-subnet-map-public-ip-on-launch/prod.logic.yaml6E5BC73B7856205B117671D98B2EC47A
Open/ce/ca/aws/vpc/disable-subnet-map-public-ip-on-launch/test-data.jsonE76E46EBAE1FCD54AA5B6E81D54EACA8
Open/types/CA10__CaAwsSubnet__c/object.extracts.yaml7F012284F2BF194EA79A157883554CA2

Generate FULL script​

java -jar repo-manager.jar policies generate FULL /ce/ca/aws/vpc/disable-subnet-map-public-ip-on-launch/prod.logic.yaml

Generate DEBUG script​

java -jar repo-manager.jar policies generate DEBUG /ce/ca/aws/vpc/disable-subnet-map-public-ip-on-launch/prod.logic.yaml

Generate CAPTURE_TEST_DATA script​

java -jar repo-manager.jar policies generate CAPTURE_TEST_DATA /ce/ca/aws/vpc/disable-subnet-map-public-ip-on-launch/prod.logic.yaml

Generate TESTS script​

java -jar repo-manager.jar policies generate TESTS /ce/ca/aws/vpc/disable-subnet-map-public-ip-on-launch/prod.logic.yaml

Execute tests​

java -jar repo-manager.jar policies test /ce/ca/aws/vpc/disable-subnet-map-public-ip-on-launch/prod.logic.yaml

Content​

Open File

---
inputType: "CA10__CaAwsSubnet__c"
testData:
- file: "test-data.json"
importExtracts:
- file: "/types/CA10__CaAwsSubnet__c/object.extracts.yaml"
conditions:
- status: "INCOMPLIANT"
currentStateMessage: "The subnet is configured to automatically assign public IP addresses to instances at launch."
remediationMessage: "Consider disabling the 'auto-assign public IP address' setting for this subnet to prevent unintended exposure of instances to the internet."
check:
IS_EQUAL:
left:
EXTRACT: "CA10__mapPublicIpOnLaunch__c"
right:
BOOLEAN: true
otherwise:
status: "COMPLIANT"
currentStateMessage: "The subnet is not configured to automatically assign public IP addresses."