Ctrlk
BlogSupport
For the complete documentation index, see llms.txt. This page is also available as Markdown.

Create a Network Exposure Policy

You can create network exposure policies based on your organization’s requirements. You can build a new network exposure policy based on the config from network where query to monitor the network exposure of an asset across your cloud environment.

  1. Select Governance.

  2. Select Add Policy > Network.

    1. Enter a Policy Name.

    2. Enter a Description (optional).

    3. Select a Severity level.

    4. Enter Labels (optional)

      create nw policy 1

    5. Select Next.

  3. Enter your RQL query in the search bar.

    The default option of New Search enables you to build a new query from scratch while Saved Search enables you to use a query that you previously saved. For example, the following query finds the interfaces that are accessible from any untrusted Internet source:

    config from network where source.network = UNTRUST_INTERNET and dest.resource.type = 'Interface' and dest.cloud.type = 'AWS' and dest.tag = 'env=prod'

    A green check mark indicates that you have a valid query and you can view the query results.

    create nw policy 3

    You cannot associate compliance standards with network exposure policies.

  4. Save the policy.

    After you successfully create your new policy, it is displayed in the Policies table.

    create nw policy 2

See Network Queries, to learn about network query attributes and examples.

PreviousCreate an IAM PolicyNextCustom Build Policies

Last updated

Was this helpful?