Check if EC2 instances have EBS optimization enabled for high compliance.
Rule | EC2 instance should have EBS optimization enabled |
Framework | FedRAMP Low Revision 4 |
Severity | ✔ High |
Rule Description
The rule requires that Amazon Elastic Compute Cloud (EC2) instances have Elastic Block Store (EBS) optimization enabled to adhere to the security requirements of FedRAMP Low Revision 4. EBS optimization helps improve the performance of EBS volumes attached to EC2 instances by optimizing the networking stack.
Troubleshooting Steps
If you encounter issues while enabling EBS optimization, follow these troubleshooting steps:
Necessary Codes
No specific code is required for enabling EBS optimization. Instead, you need to modify the instance launch configuration or use AWS Command Line Interface (CLI) commands to update the instance settings.
Step-by-Step Guide for Remediation
To enable EBS optimization for an EC2 instance, follow these steps:
aws ec2 modify-instance-attribute --instance-id <instance_id> --ebs-optimized
Replace
<instance_id>
with the ID of the EC2 instance for which you want to enable EBS optimization.By following these steps, you can ensure that the EC2 instance is in compliance with the FedRAMP Low Revision 4 requirement of having EBS optimization enabled.