All checks
Low
Unused Network Access Control Lists should be removed
Flags a custom network ACL that is associated with no subnet. Unassociated, its rules filter nothing, which matters most where someone wrote deny rules here and believes they are in force. If they should be, associate it with the subnets it was meant for instead of deleting it.
- service
- EC2
- severity
- Low
- scope
- evaluated in every region
How to fix it
- Can't be undone: A deleted network ACL cannot be restored, so copy any of its rules worth keeping before deleting it.
In the console
VPC → Network ACLs → the network ACL → Actions → Delete network ACLs
With the AWS CLI
aws ec2 delete-network-acl --network-acl-id <network-acl-id> --region <region>See which of your accounts this check is failing on.
Book a live scan