Medium EC2 Regional

EC2 subnets should not automatically assign public IP addresses

CIS

Description

Checks whether Amazon EC2 subnets automatically assign public IP addresses.


Remediation

To comply with this control, modify the subnet settings to disable the automatic assignment of public IP addresses.

Steps

  1. Sign in to the AWS Management Console and open the Amazon VPC console at https://console.aws.amazon.com/vpc/.
  2. In the navigation pane, click on 'Subnets'.
  3. Select the subnet you want to modify.
  4. In the 'Subnet Actions' dropdown menu, select 'Modify auto-assign IP settings'.
  5. Uncheck 'Auto-assign public IPv4 address' to ensure public IP addresses are not automatically assigned.
  6. Click 'Save' to apply the changes.

Compliance

CIS