Rule: EC2 Instances Should Be in a VPC

Rule Description:

Troubleshooting:

2. 1.

   Issue: EC2 instance is not deployed within a VPC. Solution: Create a VPC and migrate the EC2 instance to the VPC using the AWS Management Console or AWS CLI.

4. 2.

   Issue: Existing EC2 instances are not in a VPC, and migration is not possible. Solution: Terminate the EC2 instances and create new instances within a VPC, ensuring to follow AWS best practices for VPC design and security.

Remediation:

Step 1: Create a VPC

2. 1.
   Log in to the AWS Management Console.
4. 2.
   Navigate to the VPC service.
6. 3.
   Click on "Create VPC."
8. 4.
   Provide a name and CIDR block for the VPC.
10. 5.
    Configure any additional settings as per your requirements.
12. 6.
    Click on "Create."

Step 2: Create Subnets

2. 1.
   Within the VPC console, navigate to "Subnets."
4. 2.
   Click on "Create Subnet."
6. 3.
   Select the appropriate VPC.
8. 4.
   Specify a name for the subnet.
10. 5.
    Choose an availability zone.
12. 6.
    Define the CIDR block for the subnet.
14. 7.
    Click on "Create."

Step 3: Create an Internet Gateway

2. 1.
   Within the VPC console, navigate to "Internet Gateways."
4. 2.
   Click on "Create Internet Gateway."
6. 3.
   Provide a name for the gateway.
8. 4.
   Click on "Create."
10. 5.
    Select the newly created gateway.
12. 6.
    Click on "Actions" and choose "Attach to VPC."
14. 7.
    Select the VPC created in Step 1.
16. 8.
    Click on "Attach."

Step 4: Create a Route Table

2. 1.
   Within the VPC console, navigate to "Route Tables."
4. 2.
   Click on "Create Route Table."
6. 3.
   Provide a name for the route table.
8. 4.
   Select the VPC created in Step 1.
10. 5.
    Click on "Create."
12. 6.
    Select the newly created route table.
14. 7.
    Click on "Actions" and choose "Edit routes."
16. 8.
    Click on "Add route."
18. 9.
    Enter '0.0.0.0/0' as the Destination.
20. 10.
    Choose the internet gateway created in Step 3 as the target.
22. 11.
    Click on "Save routes."

Step 5: Modify Security Groups

2. 1.
   Within the EC2 console, navigate to "Security Groups."
4. 2.
   Select the security group associated with your EC2 instance.
6. 3.
   Click on "Actions" and choose "Edit inbound rules."
8. 4.
   Review and modify the inbound rules as per your requirements to allow necessary traffic.
10. 5.
    Click on "Save rules."

Step 6: Migrate EC2 Instance to VPC (Only for existing instances)

2. 1.
   Within the EC2 console, navigate to "Instances."
4. 2.
   Select the EC2 instance you want to migrate.
6. 3.
   Click on "Actions" and choose "Networking."
8. 4.
   Click on "Change VPC."
10. 5.
    Select the VPC created in Step 1.
12. 6.
    Choose a subnet within the VPC.
14. 7.
    Click on "Change VPC."

Conclusion: