Medium
EC2
Regional
VPCs should be configured with an interface endpoint for Systems Manager
NIST 800-53
Description
Verifies that VPC interface endpoints are available for AWS Systems Manager.
Remediation
Create a VPC interface endpoint for Systems Manager to enable private connectivity to AWS SSM.
Steps
- Open the Amazon VPC console.
- In the navigation pane, choose 'Endpoints'.
- Choose 'Create endpoint'.
- Select 'AWS services' as the service category.
- Choose 'com.amazonaws.region.ssm' as the service.
- Select your VPC and subnets.
- Choose a security group and policy.
- Choose 'Create endpoint'.
Compliance
NIST 800-53