VPC endpoint services should have acceptance required enabled¶
Ensure VPC endpoints connection requests to the service are accepted by the service owner.
How to fix¶
Attribute acceptance_required of aws_vpc_endpoint_service must be true.
Implementation options¶
Choose the option that matches how you manage Terraform. All options satisfy this control.
Option 1: Terraform AWS provider resources¶
If you manage resources directly, configure the relevant Terraform AWS provider resources to meet this control. See docs for the resources involved: aws_vpc_endpoint_service.
resource "aws_vpc_endpoint_service" "this" {
acceptance_required = true
}
Which option should I choose?
- Compliance.tf module (recommended): controls enforced by default and mapped to frameworks.
- Open source module (
terraform-aws-modules): compatible by design with compliance.tf. Same variable names for an easy, low-change migration path when you are ready. - Terraform AWS provider resources: manage Terraform resources directly.
Tool mappings¶
Use these identifiers to cross-reference this control across tools, reports, and evidence.
Compliance.tf (CTF) Control:
vpc_endpoint_service_acceptance_required_enabledPowerpipe Control:
aws_compliance.control.vpc_endpoint_service_acceptance_required_enabled