Rule: EC2 Instances Managed by AWS Systems Manager

Rule Description:

Troubleshooting Steps:

2. 1.
   Check if AWS Systems Manager is enabled for the AWS account where EC2 instances reside.
4. 2.
   Verify if the EC2 instances have the necessary permissions to communicate with AWS Systems Manager.
6. 3.
   Review the AWS Systems Manager logs and event history for any errors or issues related to the management of EC2 instances.
8. 4.
   Ensure the required AWS Systems Manager agent is installed and running on the EC2 instances.

Necessary Codes (if applicable):

2. 1.
   Create an AWS Config rule to check if all EC2 instances have AWS Systems Manager enabled:

{
    "Type": "AWS::Config::ConfigRule",
    "Properties": {
        "ConfigRuleName": "Ec2InstancesManagedBySystemsManager",
        "Description": "Ensure all EC2 instances are managed by AWS Systems Manager.",
        "Source": {
            "Owner": "AWS",
            "SourceIdentifier": "EC2_MANAGED_BY_SYSTEMS_MANAGER"
        },
        "Scope": {
            "ComplianceResourceTypes": [
                "AWS::EC2::Instance"
            ]
        }
    }
}

2. 1.
   Use AWS CloudFormation to deploy and configure the AWS Config rule:

AWSTemplateFormatVersion: '2010-09-09'
Resources:
  ConfigRule:
    Type: 'AWS::Config::ConfigRule'
    Properties:
      ConfigRuleName: Ec2InstancesManagedBySystemsManager
      Description: Ensure all EC2 instances are managed by AWS Systems Manager.
      Source:
        Owner: AWS
        SourceIdentifier: EC2_MANAGED_BY_SYSTEMS_MANAGER
      Scope:
        ComplianceResourceTypes:
          - AWS::EC2::Instance

Step-by-Step Guide for Remediation:

2. 1.
   Enable AWS Systems Manager for the AWS account if it is not already enabled.
4. 2.
   Install the AWS Systems Manager agent on all EC2 instances that need to be managed.
6. 3.
   Ensure that the EC2 instances have the necessary IAM role and permissions to communicate with AWS Systems Manager.
8. 4.
   Verify if the EC2 instances are connected to AWS Systems Manager by checking the connection status in the Systems Manager console.
10. 5.
    Monitor the AWS Systems Manager logs and event history for any errors or issues related to EC2 instance management.
12. 6.
    If any EC2 instance is not managed by AWS Systems Manager, follow the steps below to remediate:

    • Identify the unmanaged EC2 instance.
    • Ensure the AWS Systems Manager agent is installed on the EC2 instance.
    • Verify if the EC2 instance has the necessary IAM role and permissions for AWS Systems Manager.
    • If needed, manually connect the EC2 instance to AWS Systems Manager by following the AWS documentation guides.
    • Monitor the connection status and logs to ensure successful EC2 instance management.