Ensure detailed monitoring is enabled for AWS EC2 instances

LOW

Description

AWS EC2 instances without a detailed monitoring could have an impact on incident response.

Remediation

In AWS Console -

  1. Sign in to AWS Console and go to the Amazon EC2 console.
  2. In the navigation pane, select Instances.
  3. Select the instance and select Actions, Monitoring, Manage detailed monitoring.
  4. On the Detailed monitoring detail page, for Detailed monitoring, select the Enable check box.
  5. Select Save

In Terraform -

  1. For the aws_instance resource, set the monitoring field to true.

References:
https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/monitoring_automated_manual.html
https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/instance#monitoring

Policy Details

Rule Reference ID: AC_AWS_0459
CSP: AWS
Remediation Available: Yes
Resource: aws_instance
Resource Category: Compute

Frameworks