Medium EC2 Regional

EC2 paravirtual instance types should not be used

NIST

Description

Detects EC2 instances using paravirtual (PV) virtualization, a legacy type with fewer features and security controls than HVM.

To comply with this control, replace any Amazon EC2 paravirtual instances with hardware virtual machine (HVM) instances.

Sign in to the AWS Management Console and open the EC2 console at https://console.aws.amazon.com/ec2/.
In the EC2 console, click on 'Instances' in the left navigation pane.
Identify any instances that are using paravirtualization.
For each paravirtual instance, create a new instance using an HVM AMI.
Transfer any necessary data and configurations from the paravirtual instance to the new HVM instance.
Once the new HVM instance is fully operational, decommission the paravirtual instance.

NIST