EC2 launch templates should not configure network interfaces with public IPs

문서 > Datadog 보안 > OOTB Rules > EC2 launch templates should not configure network interfaces with public IPs

이 페이지는 아직 영어로 제공되지 않습니다. 번역 작업 중입니다.
현재 번역 프로젝트에 대한 질문이나 피드백이 있으신 경우 언제든지 연락주시기 바랍니다.

Description

This rule evaluates whether Amazon EC2 launch templates are configured to avoid assigning public IP addresses to network interfaces at launch.

Public IP addresses allow resources to be directly accessible from the internet, which can lead to unintended access. Restricting public IP assignment helps protect resources by minimizing exposure to external threats and ensuring controlled access.

Remediation

To update an EC2 launch template and disable public IP assignment, refer to the section Changing the Default Network Interface Settings in the Amazon EC2 Auto Scaling User Guide.