EC2 Auto Scaling groups should use EC2 launch templates
Checks that the Auto Scaling group launches from an EC2 launch template, directly or in a mixed instances policy, rather than a launch configuration. Launch configurations get no new EC2 features or instance types, and accounts created since October 2024 cannot create them at all.
- service
- AutoScaling
- severity
- Medium
- scope
- evaluated in every region
How to fix it
- Affects another check: AutoScaling.3 and Autoscaling.5 keep reading the old launch configuration until it is deleted, and EC2.170 and EC2.25 then read the new template's default version.
In the console
EC2 → Auto Scaling Groups → the group → Details → Launch configuration
- Launch template
- A launch template, such as one made with Copy to launch template from this group's launch configuration
- Version
- Default
With the AWS CLI
aws autoscaling update-auto-scaling-group --auto-scaling-group-name <group-name> --launch-template LaunchTemplateName=<template-name>,Version='$Default' --region <region>With Terraform
resource "aws_autoscaling_group" "this" {
name = var.asg_name
min_size = var.min_size
max_size = var.max_size
launch_template {
id = aws_launch_template.this.id
version = "$Default"
}
}
See which of your accounts this check is failing on.
Book a live scan