Description

Detects AWS Redshift clusters that are publicly accessible from the internet. Public Redshift clusters can be accessed directly from the internet without requiring VPN or private network connectivity, which could expose sensitive data to unauthorized access if not properly secured.

Detection Strategy

• Checks each Redshift cluster in the specified AWS region

• Reports a vulnerability if a cluster has PubliclyAccessible setting set to True

• Captures the cluster's namespace ARN and public accessibility status in the vulnerability report