Medium
EC2
Regional
Unused Amazon EC2 security groups should be removed
FSBP
Description
This control checks whether security groups are attached to Amazon Elastic Compute Cloud (Amazon EC2) instances or to an elastic network interface. The control fails if the security group is not associated with an Amazon EC2 instance or an elastic network interface. Unused security groups can create security risks by providing unnecessary access points and can also lead to confusion about which security groups are actually in use. Removing unused security groups helps maintain a clean and secure network environment.
Remediation
Remove unused security groups that are not attached to any EC2 instances or network interfaces.
Steps
- Open the Amazon EC2 console.
- Choose 'Security Groups' from the navigation pane.
- Review the list of security groups and identify which ones are not in use.
- Select the unused security group you want to delete.
- Choose 'Actions' and then 'Delete security group'.
- Confirm the deletion in the dialog box.
Compliance
FSBP