Benchmark: Auto Scaling

Usage

Browse dashboards and select Auto Scaling:

steampipe dashboard

Or run the benchmarks in your terminal:

steampipe check aws_compliance.benchmark.all_controls_autoscaling

Snapshot and share results via Steampipe Cloud:

steampipe login
steampipe check --share aws_compliance.benchmark.all_controls_autoscaling

Controls

• EC2 auto scaling group launch configurations user data should not have any sensitive data
• EC2 auto scaling groups should cover multiple availability zones
• Auto Scaling groups should not have any suspended processes
• EC2 Auto Scaling groups should use EC2 launch templates
• Auto Scaling groups with a load balancer should use health checks
• EC2 auto scaling group launch configurations should not have metadata response hop limit greater than 1
• Auto Scaling launch config public IP should be disabled
• Auto Scaling group should configure EC2 instances to require Instance Metadata Service Version 2 (IMDSv2)
• EC2 auto scaling groups should use multiple instance types in multiple availability zones

Tags