Help Center/ Config/ User Guide/ Resource Compliance/ Built-In Policies/ FunctionGraph/ FunctionGraph Functions Is only Accessible to a Specific VPC
Updated on 2025-12-04 GMT+08:00
View PDF
Share

FunctionGraph Functions Is only Accessible to a Specific VPC

Rule Details

Table 1 Rule details

Parameter

Description

Rule Name

function-graph-invoke-vpc-check

Identifier

FunctionGraph Functions Is only Accessible to a Specific VPC

Description

If any VPCs can access a FunctionGraph function, this function is non-compliant.

Tag

fgs

Trigger Type

Configuration change

Filter Type

fgs.functions

Rule Parameters

triggerVpcId: ID of the VPC that can access the FunctionGraph function.

Application Scenarios

You can allow access from only the specified VPC to a FunctionGraph function. This configuration prevents unauthorized access from external networks and enhances function security.

Solution

Configure the network environment of the function to allow only the specified VPC to access the function. For details, see Configuring Networks.

Rule Logic

  • If any VPCs can access a FunctionGraph function, this function is non-compliant.
  • If only a specified VPC can access a FunctionGraph function, this function is compliant.
Parent topic: FunctionGraph