EC2 instances should not use multiple ENIs

Documentos > Datadog Security > OOTB Rules > EC2 instances should not use multiple ENIs

This page is not yet available in Spanish. We are working on its translation.
If you have any questions or feedback about our current translation project, feel free to reach out to us!

Description

This check verifies if an EC2 instance is using multiple Elastic Network Interfaces (ENIs). If necessary, you can suppress these findings for EC2 instances that require multiple ENIs as part of an Amazon EKS cluster.

Having multiple ENIs can create dual-homed instances, which are instances connected to multiple subnets. This setup can increase network security complexity and introduce unintended network paths and access.

Remediation

For instructions on detaching a network interface from an EC2 instance, refer to the Amazon EC2 User Guide for Linux Instances.