All checks
Medium
Unused EC2 security groups should be removed
Flags security groups attached to no network interface, counting those of EC2 instances and the ones load balancers, RDS, Lambda and VPC endpoints create. An unattached group grants nothing, so this is inventory hygiene rather than an exposure: removing it means a forgotten group cannot be attached later.
- service
- EC2
- severity
- Medium
- scope
- evaluated in every region
How to fix it
In the console
EC2 → Security Groups → the security group → Actions → Delete security group
With the AWS CLI
aws ec2 delete-security-group --group-id <security-group-id> --region <region>See which of your accounts this check is failing on.
Book a demo