{
    "Provider": "aws",
    "CheckID": "appstream_fleet_default_internet_access_disabled",
    "CheckTitle": "Ensure default Internet Access from your Amazon AppStream fleet streaming instances should remain unchecked.",
    "CheckType": ["Software and Configuration Checks", "Industry and Regulatory Standards", "CIS AWS Foundations Benchmark"],
    "ServiceName": "appstream",
    "SubServiceName": "",
    "ResourceIdTemplate": "arn:partition:appstream:region:account-id:fleet/resource-id",
    "Severity": "medium",
    "ResourceType": "AppStream",
    "Description": "Ensure default Internet Access from your Amazon AppStream fleet streaming instances should remain unchecked.",
    "Risk": "Default Internet Access from your fleet streaming instances should be controlled using a NAT gateway in the VPC.",
    "RelatedUrl": "https://docs.aws.amazon.com/appstream2/latest/developerguide/set-up-stacks-fleets.html",
    "Remediation": {
      "Code": {
        "CLI": "",
        "NativeIaC": "",
        "Other": "",
        "Terraform": ""
      },
      "Recommendation": {
        "Text": "Uncheck the default internet access for the AppStream Fleet.",
        "Url": "https://docs.aws.amazon.com/appstream2/latest/developerguide/set-up-stacks-fleets.html"
      }
    },
    "Categories": [],
    "Tags": {
      "Tag1Key": "value",
      "Tag2Key": "value"
    },
    "DependsOn": [],
    "RelatedTo": [],
    "Notes": "Infrastructure Security",
    "Compliance": []
  }

