All checks
High
Block public access settings should be enabled for Amazon EBS snapshots
Flags Regions where block public access for EBS snapshots is off. Without it, any snapshot can be shared publicly, by intent or by mistake, and its data is then open to every AWS account. Evaluated only in Regions where this account owns EBS snapshots.
- service
- EC2
- severity
- High
- scope
- evaluated in every region
How to fix it
In the console
EC2 → EC2 Dashboard → Account attributes → Data protection and security → Block public access for EBS snapshots
With the AWS CLI
aws ec2 enable-snapshot-block-public-access --state block-all-sharing --region <region>With Terraform
resource "aws_ebs_snapshot_block_public_access" "this" {
state = "block-all-sharing"
}See which of your accounts this check is failing on.
Book a demo