Network misconfigurations

Amazon EC2 instance is not configured to use VPC endpoints

Platform(s)
Compliance Frameworks
  • AWS Foundational Security Best Practices Controls
  • ,
  • CCPA
  • ,
  • cis_8
  • ,
  • CPRA
  • ,
  • Data Security Posture Management (DSPM) Best Practices
  • ,
  • HITRUST
  • ,
  • iso_27001_2022
  • ,
  • iso_27002_2022
  • ,
  • Mitre ATT&CK
  • ,
  • mpa
  • ,
  • New Zealand Information Security Manual
  • ,
  • NIST 800-171
  • ,
  • NIST 800-190
  • ,
  • NIST 800-53
  • ,
  • PDPA
  • ,
  • UK Cyber Essentials

Description

AWS EC2 instance is a virtual server, that provides secure, resizable compute capacity in the cloud. EC2 instance runs in a Virtual Private Cloud (VPC) that is logically isolated from other virtual networks outside of your AWS account. VPC endpoint is a virtual device that allows EC2 instances in a VPC to connect to certain AWS services without imposing availability risks, by using private IP addresses. It was found that AWS EC2 instance {AwsEc2Instance.InstanceId} is not configured to use VPC endpoints.