Route to a VPC peering connection should not use an unrestricted CIDR

What it checks

Route to a VPC peering connection should not use an unrestricted CIDR

Where it applies

Terraform: aws_route

CloudFormation: AWS::EC2::Route

How to fix it

1. Change destination_cidr_block from 0.0.0.0/0 to the specific CIDR range of the peer VPC. VPC peering does not support transitive routing, so a default route to a peer cannot function as centralized egress anyway.

Frameworks

• NIST 800-53 rev5 SC-7
• SOC 2 CC6.6

These mappings are advisory, not an attestation of compliance.

Vendor documentation

All rules