Is vpc enforced for FedRAMP Moderate Baseline Rev 4?

Yes, This control checks whether the VPC security groups that are in use allow unrestricted incoming traffic. Optionally the rule checks whether the port numbers are listed in the authorizedTcpPorts parameter. The default values for authorizedTcpPorts are 80 and 443.

terraform-aws-modules/route53/aws for FedRAMP Moderate Baseline Rev 4

Controls

1 control from FedRAMP Moderate Baseline Rev 4 apply to this module.

Control	Clause	Change
VPC Security groups should only allow unrestricted incoming traffic for authorized portsvpc_security_group_allows_ingress_authorized_ports SC-7	SC-7