All checks
Medium
EC2 paravirtual instance types should not be used
Checks that the EC2 instance does not use paravirtual (PV) virtualization, a legacy type that cannot use enhanced networking and that current generation instance types do not support. The type comes from the AMI the instance was launched from, so changing the instance type does not change it.
- service
- EC2
- severity
- Medium
- scope
- evaluated in every region
How to fix it
- Replaces the resource: Nothing on this instance can be modified: launch a replacement from an HVM AMI, move the data volumes or restore them from snapshots, repoint traffic, then terminate this one.
- Can break clients: The replacement gets a new instance ID and, unless you move an Elastic IP to it, new IP addresses, so update anything that names this instance.
In the console
EC2 → Instances → Launch instances → Application and OS Images (Amazon Machine Image)
- Amazon Machine Image (AMI)
- One whose Virtualization is hvm, which every current generation instance type requires
With Terraform
resource "aws_instance" "this" {
ami = var.hvm_ami_id
instance_type = "m5.large"
}See which of your accounts this check is failing on.
Book a live scan