Neptune cluster instance should not be publicly accessible

What it checks

Neptune cluster instance: public address capability is enabled.

Where it applies

Terraform: aws_neptune_cluster_instance

CloudFormation: AWS::Neptune::DBInstance

How to fix it

1. Set publicly_accessible = false and place the cluster in private subnets. Reach it from within the VPC (bastion, VPN, or in-VPC application).

Frameworks

• NIST 800-53 rev5 SC-7
• SOC 2 CC6.6

These mappings are advisory, not an attestation of compliance.

Vendor documentation

All rules