AWS New Checks

Ensure EC2 Instances Do Not Have Unnecessary Public IPs
Profile Applicability: Level 1 Description: An EC2 instance can be assigned a public IP address (either via Elastic IP or through the default public IP...
Fri, 23 May, 2025 at 3:44 AM
Ensure security groups with more than 50 ingress or egress rules.
Profile Applicability: Level 1 Description: Security Groups in AWS control inbound and outbound traffic to EC2 instances. Each security group has ingre...
Tue, 1 Apr, 2025 at 11:10 PM
Ensure no security groups allow ingress and egress from wide-open IP address with a mask between 0 and 24.
Profile Applicability: Level 1 Description: Security Groups in AWS define the inbound and outbound traffic rules for EC2 instances. These rules can all...
Tue, 1 Apr, 2025 at 11:50 PM
Ensure EC2 Launch Templates Require IMDSv2 for Instance Metadata Access
Profile Applicability: Level 1 Description: Amazon EC2 instances use the Instance Metadata Service (IMDS) to provide data about the instance, such as i...
Fri, 23 May, 2025 at 3:41 AM
Ensure no security groups allow ingress from 0.0.0.0/0 or ::/0 to all ports.
Profile Applicability: Level 1 Description: Security Groups in AWS act as virtual firewalls to control inbound and outbound traffic for EC2 instances. ...
Wed, 2 Apr, 2025 at 12:14 AM
Ensure EC2 Instances Require IMDSv2 for Instance Metadata Access
Profile Applicability: Level 1 Description: Amazon EC2 Instance Metadata Service (IMDS) provides EC2 instances with metadata about themselves, includin...
Fri, 23 May, 2025 at 3:39 AM
Ensure No EC2 Instances Allow Ingress from the Internet to TCP Port 3389 (RDP)
Profile Applicability: Level 1 Description: Amazon EC2 (Elastic Compute Cloud) instances provide scalable compute capacity in the cloud. To secure EC...
Wed, 2 Apr, 2025 at 1:15 AM
Ensure no EC2 instances allow ingress from the internet to TCP port 23 (Telnet).
Profile Applicability:  Level 1 Description: This check ensures that no EC2 instances have security group rules that allow inbound traffic from the int...
Wed, 2 Apr, 2025 at 1:22 AM
Ensure no EC2 instances allow ingress from the internet to TCP port 11211 (Memcached)
Profile Applicability: Level 1 Description: This check ensures that no EC2 instances in your AWS environment allow ingress (incoming) traffic from the ...
Wed, 2 Apr, 2025 at 1:29 AM
Ensure no security groups allow ingress from 0.0.0.0/0 or ::/0 to FTP ports 20 or 21.
Profile Applicability: Level 1 Description: This check ensures that no security groups in your AWS environment allow ingress (incoming) traffic from 0...
Wed, 2 Apr, 2025 at 1:36 AM