All checks
Low
Unused Network Access Control Lists should be removed
Flags Network ACLs that are not associated with any subnet.
- service
- EC2
- severity
- Low
- scope
- evaluated in every region
How to fix it
Delete the network ACL, or associate it with the subnets it is meant to filter. Attached to no subnet it filters nothing, which matters most when someone wrote careful deny rules here and believes they are in force. AWS refuses the delete while any subnet is still associated, so you cannot remove one that is doing work by accident.
In the console
VPC → Network ACLs → the network ACL → Actions → Delete network ACL
With the AWS CLI
aws ec2 delete-network-acl --network-acl-id <network-acl-id> --region <region>See which of your accounts this check is failing on.
Book a demo