Checks/Aws/Test-EmrClusterAccountPublicBlockEnabled.ps1
|
function Test-EmrClusterAccountPublicBlockEnabled { <# .SYNOPSIS EMR account has Block Public Access enabled .DESCRIPTION Amazon EMR account-level **Block Public Access** configuration is assessed per Region. When `BlockPublicSecurityGroupRules` is enabled, clusters cannot use security groups that allow inbound public sources (`0.0.0.0/0`, `::/0`) except on permitted ports. .PARAMETER Check CIEMCheck object containing check metadata. #> [CmdletBinding()] [OutputType([PSCustomObject[]])] param( [Parameter(Mandatory)] [CIEMCheck]$Check ) $ErrorActionPreference = 'Stop' # TODO: Implement check logic based on Prowler check: emr_cluster_account_public_block_enabled [CIEMScanResult]::Create($Check, 'MANUAL', 'This check requires manual implementation. See Prowler check emr_cluster_account_public_block_enabled for reference.', 'N/A', 'emr Resources') } |