Not all EIP addresses allocated to a VPC are attached to EC2 instances misconfiguration detected in

Rule Details

Cortex AppSec Rule ID	APPSEC2_AWS_19
Category - Subcategory	Public Exposure - VPC VCN VNet
Provider	AWS
Severity	LOW
Framework	Terraform, Terraform Plan

Impact

Ensure that an Elastic IP (EIP) is allocated for each NAT gateway that you want to deploy within your AWS account. An EIP address is a static, public IP address designed for dynamic cloud computing. You can associate an AWS EIP address with any EC2 instance, VPC ENI or NAT gateway. A Network Address Translation (NAT) gateway is a device that helps enabling EC2 instances in a private subnet to connect to the Internet and prevent the Internet from initiating a connection with those instances. With Elastic IPs, you can mask the failure of an EC2 instance by rapidly remapping the address to another instance launched in your VPC

How to Fix

Resource: aws_eip, aws_instance

• Arguments: instance and vpc of aws_eip [source,go]

---

{ "resource "aws_eip" "ok_eip" { instance = aws_instance.ec2.id vpc = true }

resource "aws_instance" "ec2" { ami = "ami-21f78e11" availability_zone = "us-west-2a" instance_type = "t2.micro"

tags = { Name = "HelloWorld" }

} ", }