Is vpc enforced for NIST SP 800-53 Rev 5?

Yes, This control checks whether the VPC security groups that are in use allow unrestricted incoming traffic. Optionally the rule checks whether the port numbers are listed in the authorizedTcpPorts parameter. The default values for authorizedTcpPorts are 80 and 443.

terraform-aws-modules/route53/aws for NIST SP 800-53 Rev 5

Controls

1 control from NIST SP 800-53 Rev 5 apply to this module.

Control	Clause	Change
VPC Security groups should only allow unrestricted incoming traffic for authorized portsvpc_security_group_allows_ingress_authorized_ports SC-7	SC-7