All checks
High
EC2 instances should not have a public IPv4 address
Flags EC2 instances that have a public IPv4 address, whether auto-assigned or an Elastic IP. With a route to an internet gateway, that address makes the instance reachable from the internet, limited only by its security groups and network ACLs.
- service
- EC2
- severity
- High
- scope
- evaluated in every region
How to fix it
In the console
EC2 → Network Interfaces → the instance's primary interface → Actions → Manage IP addresses
With the AWS CLI
aws ec2 modify-network-interface-attribute --network-interface-id <eni-id> --no-associate-public-ip-addressSee which of your accounts this check is failing on.
Book a demo