EC2 Uses Multiple Elastic Network Interfaces.
More Info:
This rule checks if Amazon Elastic Compute Cloud (Amazon EC2) uses multiple Elastic Network Interfaces (ENIs) or Elastic Fabric Adapters (EFAs). The rule is NON_COMPLIANT an Amazon EC2 instance use multiple network interfaces.Risk Level
LowAddress
ConfigurationCompliance Standards
CBPTriage and Remediation
Remediation
Using Console
Using Console
To remediate the issue of an EC2 instance using multiple Elastic Network Interfaces (ENIs) in AWS, you can follow these steps using the AWS Management Console:
-
Identify the EC2 Instance:
- Log in to your AWS Management Console.
- Go to the EC2 dashboard.
- Identify the EC2 instance that is using multiple ENIs.
-
Detach Unnecessary ENIs:
- Select the EC2 instance that is using multiple ENIs.
- In the Description tab, under Network interfaces, you will see the list of attached ENIs.
- Identify the additional ENIs that are not required for the instance.
- Select the unnecessary ENIs one by one and click on the “Actions” dropdown.
- From the dropdown, select “Detach network interface”.
- Confirm the action to detach the ENI from the EC2 instance.
-
Delete Unnecessary ENIs (Optional):
- If the ENIs are no longer needed in your account, you can also choose to delete them.
- Go to the EC2 dashboard and select “Network Interfaces” from the left-hand menu.
- Identify the unnecessary ENIs and select them.
- Click on the “Actions” dropdown and choose “Delete network interface”.
- Confirm the action to delete the ENI.
-
Verify Configuration:
- After detaching or deleting the unnecessary ENIs, go back to the EC2 instance Description tab.
- Ensure that the EC2 instance is now using only the required ENI.
-
Update Security Groups and Route Tables (if necessary):
- If the ENIs that were detached had specific security group rules or were associated with custom route tables, make sure to update the security groups and route tables associated with the remaining ENI to ensure connectivity and proper network routing.
Using CLI
Using CLI
To remediate the issue of an EC2 instance using multiple Elastic Network Interfaces (ENIs) in AWS using the AWS CLI, you can follow these steps:Step 1: List all the instances with multiple ENIsStep 2: Identify the instance you want to work on based on the InstanceId.Step 3: Detach the additional ENIs from the instanceReplace Replace By following these steps, you can remediate the issue of an EC2 instance using multiple Elastic Network Interfaces in AWS using the AWS CLI.
<AttachmentID> with the attachment ID of the additional ENI you want to detach.Step 4: Verify that the additional ENIs have been detached successfully<InstanceId> with the InstanceId of the instance you worked on.Step 5: If the issue persists, you may need to stop and start the instance for the changes to take effect.Using Python
Using Python
To remediate the issue of an EC2 instance using multiple Elastic Network Interfaces (ENIs) in AWS using Python, you can follow these steps:By following these steps, you can use Python and Boto3 to identify EC2 instances with multiple ENIs attached and detach the extra ENIs to remediate the misconfiguration.
- Identify the EC2 instances with multiple ENIs: Use the AWS SDK for Python (Boto3) to list all EC2 instances in your account and identify instances with more than one ENI attached.
- Detach extra ENIs: For instances identified with multiple ENIs, you can choose to detach the extra ENIs. Here’s how you can do it:
- Verify the remediation: After detaching the extra ENIs, verify that each EC2 instance has only one ENI attached.