Low EC2 Regional

EC2 instances should not use multiple ENIs

NIST

Description

Checks whether Amazon EC2 instances are using multiple Elastic Network Interfaces.


Remediation

To comply with this control, ensure that Amazon EC2 instances are not using multiple Elastic Network Interfaces (ENIs). Modify the network configuration to use a single ENI.

Steps

  1. Sign in to the AWS Management Console and open the EC2 console at https://console.aws.amazon.com/ec2/.
  2. In the EC2 console, click on 'Instances' in the left navigation pane.
  3. Select the instance you want to modify.
  4. In the 'Description' tab, check the number of network interfaces attached to the instance.
  5. If the instance has multiple ENIs, click on 'Actions', then 'Networking', and select 'Manage Network Interfaces'.
  6. Detach the additional network interfaces until only one remains attached to the instance.
  7. Apply the changes and verify that the instance is now using only a single ENI.

Compliance

NIST