Help Center/ Config/ User Guide/ Resource Compliance/ Built-In Policies/ MapReduce Service/ MRS Clusters Should Not Use EIPs
Updated on 2025-08-25 GMT+08:00
View PDF
Share

MRS Clusters Should Not Use EIPs

Rule Details

Table 1 Rule details

Parameter

Description

Rule Name

mrs-cluster-no-public-ip

Identifier

MRS Clusters Should Not Use EIPs

Description

If an MRS cluster has an EIP bound, this cluster is non-compliant.

Tag

mrs

Trigger Type

Configuration change

Filter Type

mrs.mrs

Rule Parameters

None

Application Scenarios

Do not attach EIPs to your MRS clusters unless they must communicate over the public network. This reduces the attack surface and the risk of sensitive data leakage.

Solution

Detach EIPs from the Managers of your clusters by following the instructions provided in How Do I Unbind an EIP from FusionInsight Manager of an MRS Cluster?

Rule Logic

  • If an MRS cluster has an EIP bound, this cluster is non-compliant.
  • If an MRS cluster does not have EIP bound, this cluster is compliant.
Parent topic: MapReduce Service