All checks
Medium
Stopped EC2 instances should be removed after a specified time period
Flags EC2 instances stopped for more than 30 days. A stopped instance gets no patches, so it rejoins the network carrying every vulnerability fixed while it was down. If it is still needed, starting it to patch and stopping it again restarts the 30 days.
- service
- EC2
- severity
- Medium
- scope
- evaluated in every region
How to fix it
In the console
EC2 → Instances → the instance → Instance state → Terminate (delete) instance
With the AWS CLI
aws ec2 terminate-instances --instance-ids <instance-id> --region <region>See which of your accounts this check is failing on.
Book a demo