Unused EC2 EIPs should be removed
Flags Elastic IP addresses that are unassociated and no longer in use.
- service
- EC2
- severity
- Low
- scope
- evaluated in every region
How to fix it
Release the Elastic IP, or associate it with something reachable: an EC2 instance, or a network interface that is itself attached to something. Releasing cannot be undone and you will not get the same address back, so check DNS records, partner firewall allow-lists and VPN customer gateway configuration first. If it is held deliberately for a standby workload, suppress this rather than release it.
In the console
EC2 → Elastic IPs → the address → Actions → Release Elastic IP addresses
With the AWS CLI
aws ec2 release-address --allocation-id <allocation-id> --region <region>
See which of your accounts this check is failing on.
Book a demo