Ensure that EC2 is EBS optimized
An Amazon EBS–optimized instance uses an optimized configuration stack and provides additional, dedicated capacity for Amazon EBS I/O. This optimization provides the best performance for your EBS volumes by minimizing contention between Amazon EBS I/O and other traffic from your instance.
Risk Level: Low
Cloud Entity: Amazon EC2 Instance
CloudGuard Rule ID: D9.CFT.OPE.11
Covered by Spectral: Yes
Category: Compute
GSL LOGIC
AWS_EC2_Instance should have EbsOptimized=true
REMEDIATION
From CFT
Set AWS::EC2::Instance EbsOptimized
property to true
References
- https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-instance.html#cfn-ec2-instance-ebsoptimized
- https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-optimized.html
Amazon EC2 Instance
Amazon Elastic Compute Cloud (Amazon EC2) is a web service that provides secure, resizable compute capacity in the cloud. It is designed to make web-scale cloud computing easier for developers.
Compliance Frameworks
- AWS CloudFormation ruleset
Updated over 1 year ago