Unused Elastic Network Interfaces Should Be Removed
More Info:
Unused AWS Elastic Network Interfaces (ENIs) should be removed to follow best practices.Risk Level
InformationalAddress
Cost optimization, Operational MaturityCompliance Standards
AWSWAF, HITRUST, SOC2, NISTCSFTriage and Remediation
Remediation
Using Console
Using Console
To remediate the unused Elastic Network Interfaces in AWS, you can follow the below steps using AWS console:
- Login to AWS console and navigate to the EC2 dashboard.
- Click on the “Network Interfaces” option from the left-hand menu.
- Sort the list of network interfaces by the “Status” column, and identify the interfaces that have a status of “available” or “detached”. These are the unused interfaces.
- Select the unused network interfaces that you want to remove.
- Click on the “Actions” dropdown menu and select “Delete network interface”.
- A confirmation message will appear. Click on “Yes, Delete” to confirm the deletion of the selected network interfaces.
Using CLI
Using CLI
To remediate the misconfiguration of unused Elastic Network Interfaces in AWS, you can follow the below steps using AWS CLI:This command will list all the available ENIs that are not currently attached to any EC2 instances.Replace This command should return an empty list, indicating that there are no more available ENIs that are not currently attached to any EC2 instances.
- First, you need to identify the unused Elastic Network Interfaces (ENIs). To do this, run the following command:
- Once you have identified the unused ENIs, you can delete them using the following command:
<eni-id> with the ID of the unused ENI that you want to delete. You can run this command for each unused ENI that you identified in step 1.- Finally, to confirm that the unused ENIs have been deleted, you can run the following command:
Using Python
Using Python
To remediate the misconfiguration of unused Elastic Network Interfaces in AWS using Python, you can use the Boto3 library which is the AWS SDK for Python. Here are the steps to remediate the misconfiguration:
- Import the necessary libraries:
- Set up logging to capture any errors:
- Create an EC2 client using Boto3:
- Use the
describe_network_interfacesmethod to get a list of all the network interfaces in your account:
- Loop through the response to find all the unused network interfaces and delete them:
- Run the script and it will delete all the unused network interfaces in your AWS account.