All checks
Medium EC2 · regional

VPCs should be configured with an interface endpoint for Systems Manager

Verifies that VPC interface endpoints are available for AWS Systems Manager.

service
EC2
severity
Medium
scope
evaluated in every region

How to fix it

Create a VPC interface endpoint for Systems Manager to enable private connectivity to AWS SSM.

  1. Open the Amazon VPC console.
  2. In the navigation pane, choose 'Endpoints'.
  3. Choose 'Create endpoint'.
  4. Select 'AWS services' as the service category.
  5. Choose 'com.amazonaws.region.ssm' as the service.
  6. Select your VPC and subnets.
  7. Choose a security group and policy.
  8. Choose 'Create endpoint'.

See which of your accounts this check is failing on.

Book a demo