More Info:

It is recommended not to using the default VPC.

Risk Level

Medium

Address

Security

Compliance Standards

GDPR, SOC2, NISTCSF

Triage and Remediation

Remediation

To remediate the “Default VPC Should Not Be In Use” misconfiguration in AWS, you can follow these steps:

  1. Log in to the AWS Management Console.

  2. Open the Amazon VPC console.

  3. In the navigation pane, select “Your VPCs”.

  4. Identify the default VPC. The default VPC has the “Default VPC” tag.

  5. Select the default VPC.

  6. Choose “Actions”, and then choose “Delete VPC”.

  7. In the confirmation dialog box, choose “Delete VPC”.

  8. If you have any resources running in the default VPC, you will need to move them to a new VPC before you can delete the default VPC. To do this, follow these steps:

    a. In the navigation pane, select the resource type (such as EC2 instances or RDS instances).

    b. Select the resource that is running in the default VPC.

    c. Choose “Actions”, and then choose “Create Image” (for EC2 instances) or “Create Snapshot” (for RDS instances).

    d. After the image or snapshot is created, launch a new instance or RDS instance in a new VPC.

  9. After you have moved all resources out of the default VPC, repeat steps 5-7 to delete the default VPC.

  10. Once the default VPC is deleted, you should create a new VPC and configure it according to your requirements.

Additional Reading: