Public Access Check

Rule Details

**Table 1** Rule details
Parameter	Description
Rule Name	function-graph-public-access-prohibited
Identifier	Public Access Check
Description	If a function can be accessed over a public network, this function is non-compliant.
Tag	fgs
Trigger Type	Configuration change
Filter Type	fgs.functions
Rule Parameters	None

Application Scenarios

By default, functions can access services on public networks. The default public NAT access bandwidth is shared between tenants in testing scenarios that involve a small number of requests. In production scenarios that require high bandwidth, performance, and reliability, enable VPC access for your function, add a public NAT gateway, and bind an EIP with an exclusive bandwidth to it. For details, see Configuring the Network.

Solution

If your function does not need to access the public network, disable Public Access and enable VPC Access. For details, see Network Restrictions.

If your function needs to access the public network, disable Public Access and configure a fixed public IP address for the function.