All checks
Medium
EFS mount targets should not be associated with subnets that assign public IP addresses on launch
Flags EFS mount targets associated with subnets that automatically assign public IP addresses on instance launch.
- service
- EFS
- severity
- Medium
- scope
- evaluated in every region
How to fix it
To ensure EFS mount targets are not associated with subnets that assign public IP addresses, you need to modify the subnet configuration or move the mount targets to private subnets.
- Navigate to the Amazon VPC console
- Select the subnet where your EFS mount target is located
- Choose 'Actions' and then 'Modify auto-assign IP settings'
- Disable 'Auto-assign public IPv4 address' for the subnet
- Alternatively, create a new private subnet and move the mount target
- Verify that the mount target is no longer publicly accessible
See which of your accounts this check is failing on.
Book a demo