EC2 instances should not use multiple ENIs

문서 > Datadog 보안 > OOTB Rules > EC2 instances should not use multiple ENIs

이 페이지는 아직 영어로 제공되지 않습니다. 번역 작업 중입니다.
현재 번역 프로젝트에 대한 질문이나 피드백이 있으신 경우 언제든지 연락주시기 바랍니다.

Description

This check verifies if an EC2 instance is using multiple Elastic Network Interfaces (ENIs). If necessary, you can suppress these findings for EC2 instances that require multiple ENIs as part of an Amazon EKS cluster.

Having multiple ENIs can create dual-homed instances, which are instances connected to multiple subnets. This setup can increase network security complexity and introduce unintended network paths and access.

Remediation

For instructions on detaching a network interface from an EC2 instance, refer to the Amazon EC2 User Guide for Linux Instances.