Checks/Aws/Test-EksClusterNotPubliclyAccessible.ps1
|
function Test-EksClusterNotPubliclyAccessible { <# .SYNOPSIS EKS cluster endpoint is not publicly accessible from 0.0.0.0/0 .DESCRIPTION **Amazon EKS** cluster API server endpoint is evaluated for **unrestricted Internet access**, specifically when the public endpoint permits connections from `0.0.0.0/0` instead of private access or limited CIDR ranges. .PARAMETER Check CIEMCheck object containing check metadata. #> [CmdletBinding()] [OutputType([PSCustomObject[]])] param( [Parameter(Mandatory)] [CIEMCheck]$Check ) $ErrorActionPreference = 'Stop' # TODO: Implement check logic based on Prowler check: eks_cluster_not_publicly_accessible [CIEMScanResult]::Create($Check, 'MANUAL', 'This check requires manual implementation. See Prowler check eks_cluster_not_publicly_accessible for reference.', 'N/A', 'eks Resources') } |