Control: 1 EC2 instances should be managed by AWS Systems Manager
Description
This control checks whether the EC2 instances in your account are managed by AWS Systems Manager. Systems Manager is an AWS service that you can use to view and control your AWS infrastructure.
To help you to maintain security and compliance, Systems Manager scans your managed instances. A managed instance is a machine that is configured for use with Systems Manager. Systems Manager then reports or takes corrective action on any policy violations that it detects. Systems Manager also helps you to configure and maintain your managed instances.
Remediation
To ensure that EC2 instances are managed by Systems Manager
- Open the AWS Systems Manager console.
- Choose
Quick setup. - On the configuration screen, keep the default options.
- Choose
Enable.
Usage
Run the control in your terminal:
powerpipe control run aws_compliance.control.foundational_security_ssm_1Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run aws_compliance.control.foundational_security_ssm_1 --shareSQL
This control uses a named query:
ec2_instance_ssm_managed