Vendor services misconfigurations

Amazon EC2 instances launched using Auto Scaling group launch configurations should not have public IP addresses

Description

Auto Scaling group is a logical grouping of instances for the purposes of automatic scaling and management. Amazon EC2 instances in an Auto Scaling group launch configuration should not have an associated public IP address, except for in limited edge cases. Amazon EC2 instances should only be accessible from behind a load balancer instead of being directly exposed to the internet. More information can be found here https://docs.aws.amazon.com/securityhub/latest/userguide/autoscaling-controls.html#autoscaling-5