Data protection
Recommended Mitigation
Limit the instance's access to S3 by granting it specific action permissions and defining the specific resources it should have access to. This can be achieved by revising the instance's IAM Instance Profile - {AwsEc2Instance.InstanceProfile}. ## Remediation --- >1. Sign in to the AWS Management Console, open the **[EC2 console](https://console.aws.amazon.com/ec2)**, and then choose **Instances**. >2. Choose the desired EC2 instance. >3. Choose **Actions**, **Security**, and then choose **Modify IAM role**. >4. In the **Choose IAM role** dropdown list, choose instance profile, with more specific action permissions and resources, that you want to attach. >5. Choose **Save**.
