logo

Database

Aws Associate Public Ip

Description

Detects AWS EC2 Launch Templates that are configured to automatically assign public IP addresses to EC2 instances. Automatic public IP assignment can expose instances directly to the internet, increasing the attack surface and potentially violating network security best practices.

Weakness:

333 - Insecure service configuration - EC2

Category: Functionality Abuse

Detection Strategy

    Scans all EC2 Launch Templates in the specified AWS region

    Checks each template version for NetworkInterfaces or InstanceConfiguration settings that enable automatic public IP assignment

    Reports a vulnerability when a Launch Template is configured with AssociatePublicIpAddress set to true