AWS > EC2 >

Web-Tier EC2 Instance IAM Role

HIGH

Source

CloudSploit

web-tier-ec2-instance-iam-role

management console

Web-Tier EC2 Instance IAM Role

Ensure IAM roles attached with Web-Tier EC2 instances have IAM policies attached.

EC2 instances should have IAM roles configured with necessary permission to access other AWS services

Recommended Actions

Modify EC2 instances to attach IAM roles with required IAM policies

Links

https://aws.amazon.com/blogs/security/new-attach-an-aws-iam-role-to-an-existing-amazon-ec2-instance-by-using-the-aws-cli/

Aqua Container Security

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.