Description

Auto Scaling group is a logical grouping of instances for the purposes of automatic scaling and management. Amazon EC2 instances in an Auto Scaling group launch configuration should not have an associated public IP address, except for in limited edge cases. Amazon EC2 instances should only be accessible from behind a load balancer instead of being directly exposed to the internet. More information can be found here https://docs.aws.amazon.com/securityhub/latest/userguide/autoscaling-controls.html#autoscaling-5

• 

  Recommended Mitigation

  It is recommended to not assign a public IP address to any instances in an auto scaling group launch configurations.