6.13 Ensure Routing Table associated with Web tier ELB subnet have the default route ( defined to allow connectivity


A _route table_ contains a set of rules, called _routes_, that are used to determine where network traffic is directed.

Each subnet in your VPC must be associated with a route table; the table controls the routing for the subnet. A subnet can only be associated with one route table at a time, but you can associate multiple subnets with the same route table.
The default route ( should be pointing to the Internet Gateway in order to provide internet connectivity for the Web tier ELB.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.


Using the Amazon unified command line interface:

* For the above route tables, if the default route ( exists but it doesn't have an IGW configured as gateway:

aws ec2 replace-route --route-table-id _<route_table_id>_ --destination-cidr-block --gateway-id _<vpc_igw>_

* For the above route tables, if the default route ( doesn't exist:

aws ec2 create-route --route-table-id _<route_table_id>_ --destination-cidr-block --gateway-id _<vpc_igw>_

See Also


Item Details


References: 800-53|SC-7(15)

Plugin: amazon_aws

Control ID: 52a72c03ac560db04bf5b55486b582267e164d4121db182a26a75573e702e84f