Vendor services misconfigurations

Ec2 Systems Manager(SSM) non compliant – association

Platform(s)
Compliance Frameworks
  • AWS Foundational Security Best Practices Controls
  • ,
  • CCPA
  • ,
  • CPRA
  • ,
  • iso_27001_2022
  • ,
  • iso_27002_2022
  • ,
  • New Zealand Information Security Manual
  • ,
  • NIST 800-171
  • ,
  • NIST 800-190
  • ,
  • NIST 800-53
  • ,
  • PDPA
  • ,
  • UK Cyber Essentials

Description

Systems Manager is an AWS service that you can use to view and control your AWS infrastructure as well as maintain security and compliance. A State Manager association is a configuration that is assigned to the instances that you manage. The configuration specifies the state that you want your instances to maintain. After running the association on an instance, the compliance of the AWS Systems Manager association can be COMPLIANT or NON COMPLIANT. The asset {AwsEc2Instance} ({AwsEc2Instance.InstanceId}) have an association compliance status of NON_COMPLIANT.