turbot/aws_compliance
Loading controls...

Control: 1 EC2 instances should be managed by AWS Systems Manager

Description

This control checks whether the EC2 instances in your account are managed by AWS Systems Manager. Systems Manager is an AWS service that you can use to view and control your AWS infrastructure.

To help you to maintain security and compliance, Systems Manager scans your managed instances. A managed instance is a machine that is configured for use with Systems Manager. Systems Manager then reports or takes corrective action on any policy violations that it detects. Systems Manager also helps you to configure and maintain your managed instances.

Remediation

To ensure that EC2 instances are managed by Systems Manager

  1. Open the AWS Systems Manager console.
  2. Choose Quick setup.
  3. On the configuration screen, keep the default options.
  4. Choose Enable.

Usage

Run the control in your terminal:

powerpipe control run aws_compliance.control.foundational_security_ssm_1

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run aws_compliance.control.foundational_security_ssm_1 --share

SQL

This control uses a named query:

ec2_instance_ssm_managed

Tags