Checks/Aws/Test-LightsailInstancePublic.ps1
|
function Test-LightsailInstancePublic { <# .SYNOPSIS Lightsail instance has no publicly accessible ports .DESCRIPTION **Lightsail instances** that have a **public IP** and at least one firewall rule allowing **public ports** are treated as publicly exposed. The evaluation inspects instance addressing and port rules to detect any port or range marked `public`. .PARAMETER Check CIEMCheck object containing check metadata. #> [CmdletBinding()] [OutputType([PSCustomObject[]])] param( [Parameter(Mandatory)] [CIEMCheck]$Check ) $ErrorActionPreference = 'Stop' # TODO: Implement check logic based on Prowler check: lightsail_instance_public [CIEMScanResult]::Create($Check, 'MANUAL', 'This check requires manual implementation. See Prowler check lightsail_instance_public for reference.', 'N/A', 'lightsail Resources') } |