Medium EC2 Regional

EC2 Transit Gateways should not automatically accept VPC attachment requests

NISTISO 27001

Description

Checks whether Amazon EC2 Transit Gateways are configured not to automatically accept VPC attachment requests.

To ensure compliance with this control, modify the Transit Gateway settings to disable the automatic acceptance of VPC attachment requests.

Sign in to the AWS Management Console and open the Amazon VPC console at https://console.aws.amazon.com/vpc/.
In the navigation pane, click on 'Transit Gateways'.
Select the Transit Gateway you want to modify.
In the 'Actions' dropdown menu, select 'Modify Auto Accept Attachments'.
In the 'Modify Auto Accept Attachments' window, set 'Auto Accept Shared Attachments' to 'Disable'.
Click 'Save' to apply the changes.

NISTISO 27001