GCP App Engine Firewall Rule allows public access Affecting Network service in Google

Severity Framework Snyk CCSS

Rule category Network / Firewall

Is your enviroment affected by this misconfiguration?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Frameworks

CIS-Controls CSA-CCM ISO-27001 NIST-800-53 PCI-DSS SOC-2

Description

Inbound traffic is allowed to a resource from any source instead of a restricted range.

Set source_range to specific IP range only, e.g. 192.168.1.0/24.

resource "google_app_engine_firewall_rule" "allowed1" {
  priority     = 1001
  action       = "DENY"
  source_range = "0.0.0.0/0"
}