Default VPC Should Not Be In Use
More Info:
It is recommended not to using the default VPC.Risk Level
MediumAddress
SecurityCompliance Standards
GDPR, SOC2, NISTCSFTriage and Remediation
Remediation
Using Console
Using Console
To remediate the “Default VPC Should Not Be In Use” misconfiguration in AWS, you can follow these steps:
- Log in to the AWS Management Console.
- Open the Amazon VPC console.
- In the navigation pane, select “Your VPCs”.
- Identify the default VPC. The default VPC has the “Default VPC” tag.
- Select the default VPC.
- Choose “Actions”, and then choose “Delete VPC”.
- In the confirmation dialog box, choose “Delete VPC”.
- If you have any resources running in the default VPC, you will need to move them to a new VPC before you can delete the default VPC. To do this, follow these steps: a. In the navigation pane, select the resource type (such as EC2 instances or RDS instances). b. Select the resource that is running in the default VPC. c. Choose “Actions”, and then choose “Create Image” (for EC2 instances) or “Create Snapshot” (for RDS instances). d. After the image or snapshot is created, launch a new instance or RDS instance in a new VPC.
- After you have moved all resources out of the default VPC, repeat steps 5-7 to delete the default VPC.
- Once the default VPC is deleted, you should create a new VPC and configure it according to your requirements.
Using CLI
Using CLI
To remediate the misconfiguration of using the Default VPC in AWS, follow these steps:
- Open the AWS CLI on your local machine or in the AWS Management Console.
-
Run the following command to list all the VPCs in your account:
-
Identify the Default VPC in the output. The Default VPC has the
isDefaultattribute set totrue. -
Run the following command to delete the Default VPC:
Replace
<vpc-id>with the ID of the Default VPC that you want to delete. -
Confirm the deletion by entering
ywhen prompted. -
Once the Default VPC is deleted, you will need to create a new VPC and configure it according to your requirements.
Replace
<cidr-block>with the CIDR block that you want to assign to the new VPC. - Configure the VPC by adding subnets, route tables, security groups, and any other required resources.
- Once the VPC is configured, launch your instances in the new VPC instead of the Default VPC.
Using Python
Using Python
To remediate the “Default VPC Should Not Be In Use” misconfiguration in AWS using Python, follow these steps:This should remediate the “Default VPC Should Not Be In Use” misconfiguration in AWS using Python.
- Import the necessary AWS SDK libraries for Python:
- Create a new EC2 resource object:
- Get a list of all VPCs in the AWS account:
- Loop through the list of VPCs and check if any of them are the default VPC:
- If a default VPC is found, you can either delete it or modify it to remove the default status. To delete the default VPC, use the following code:
- Alternatively, you can modify the default VPC to remove the default status. To do this, you need to modify the “is_default” attribute of the VPC:
- Finally, you can confirm that the default VPC has been remediated by checking the list of VPCs again: