AWS EC2 instances with public IP and associated with security groups have Internet access misconfigu

Rule Details

Cortex AppSec Rule ID	APPSEC_AWS_88
Category - Subcategory	Public Exposure - VPC VCN VNet
Provider	AWS
Severity	HIGH
Framework	Ansible, CloudFormation, Serverless, Terraform, Terraform Plan

Impact

A public IP address is an IPv4 address that is reachable from the Internet. You can use public addresses for communication between your instances and the Internet. Each instance that receives a public IP address is also given an external DNS hostname. We recommend you control whether your instance receives a public IP address as required.

How to Fix

In this example, assign_public_ip is changed from true to false, removing the public IP address and DNS resolution. [source,go]

• name: Launch an EC2 instance without a public IP amazon.aws.ec2_instance: name: my_secure_ec2 image_id: ami-123456 instance_type: t2.micro network:
•  assign_public_ip: true

•  assign_public_ip: false

---