Network misconfigurations

Amazon EC2 instance is not configured to use VPC endpoints

Platform(s)
Compliance Frameworks

AWS Foundational Security Best Practices Controls, CCPA, cis_8, CPRA, Data Security Posture Management (DSPM) Best Practices, HITRUST, iso_27001_2022, iso_27002_2022, Mitre ATT&CK, mpa, New Zealand Information Security Manual, NIST 800-171, NIST 800-190, NIST 800-53, PDPA, UK Cyber Essentials

Description

AWS EC2 instance is a virtual server, that provides secure, resizable compute capacity in the cloud. EC2 instance runs in a Virtual Private Cloud (VPC) that is logically isolated from other virtual networks outside of your AWS account. VPC endpoint is a virtual device that allows EC2 instances in a VPC to connect to certain AWS services without imposing availability risks, by using private IP addresses. It was found that AWS EC2 instance {AwsEc2Instance.InstanceId} is not configured to use VPC endpoints.