Question 1

Is metadata_options enforced for NIS2 Directive (EU 2022/2555)?

Accepted Answer

Yes, This control checks whether an Amazon EC2 launch template is configured with Instance Metadata Service Version 2 (IMDSv2). The control fails if HttpTokens is set to optional.

Question 2

Is network_interfaces enforced for NIS2 Directive (EU 2022/2555)?

Accepted Answer

Yes, This control checks if AWS EC2 launch templates are configured to assign public IP addresses to network interfaces upon launch. The control fails if an EC2 launch template is configured to assign a public IP address to network interfaces or if there is at least one network interface that has a public IP address.

AWS Auto Scaling Group (ASG) Terraform module

Terraform Module Source