Ec2 termination protection remediation

Using Console

Using CLI

To remediate the misconfiguration “Termination Protection Should Be Enabled” for an EC2 instance in AWS using AWS CLI, follow the below steps:

Open the AWS CLI on your local machine.
Run the following command to enable termination protection for an EC2 instance:
```
aws ec2 modify-instance-attribute --instance-id <instance-id> --no-disable-api-termination
```
Replace <instance-id> with the ID of the EC2 instance for which you want to enable termination protection.
Verify that the termination protection is enabled for the instance by running the following command:
```
aws ec2 describe-instance-attribute --instance-id <instance-id> --attribute disableApiTermination
```
If the output shows "Value": false, it means that termination protection is enabled for the instance.
Repeat the above steps for all the EC2 instances in your AWS account to ensure that termination protection is enabled for all of them.

Note: Enabling termination protection is a safety measure to prevent accidental termination of instances. However, it should not be used as a substitute for proper backup and disaster recovery planning.

Using Python

The following steps can be followed to remediate the “Termination Protection Should Be Enabled” misconfiguration in AWS using Python:

Import the necessary libraries:

import boto3

Create an EC2 client:

ec2 = boto3.client('ec2')

Get a list of all instances:

response = ec2.describe_instances()
instances = []
for reservation in response['Reservations']:
    for instance in reservation['Instances']:
        instances.append(instance['InstanceId'])

Enable termination protection for each instance:

for instance in instances:
    ec2.modify_instance_attribute(InstanceId=instance, DisableApiTermination={'Value': True})

This will enable termination protection for all instances in your AWS account.

AWS Introduction

AWS Pricing

AWS Threats

AWS Misconfigurations

Ec2 termination protection remediation

Triage and Remediation

Remediation