Auto Scaling group launch configuration should not assign public IP addresses

문서 > Datadog 보안 > OOTB Rules > Auto Scaling group launch configuration should not assign public IP addresses

이 페이지는 아직 한국어로 제공되지 않으며 번역 작업 중입니다. 번역에 관한 질문이나 의견이 있으시면 언제든지 저희에게 연락해 주십시오.

Description

This control examines whether the launch configuration of an Auto Scaling group assigns a public IP address to its instances. The control fails if the launch configuration enables public IP addresses to be assigned.

Instances within an Auto Scaling group should not be assigned a public IP address, except in specific, limited scenarios. EC2 instances should typically be accessed through a load balancer rather than being directly exposed to the internet.

Remediation

For guidance on updating Auto Scaling launch configurations, refer to the Change the launch configuration for an Auto Scaling group section of the Amazon EC2 Auto Scaling User Guide.