Question 1

Is iam_instance_profile enforced for NIS2 Directive (EU 2022/2555)?

Accepted Answer

Yes, Ensure that an AWS Elastic Compute Cloud (AWS EC2) instance has an Identity and Access Management (IAM) profile attached to it. This rule is non-compliant if no IAM profile is attached to the AWS EC2 instance.

Question 2

Is metadata_options enforced for NIS2 Directive (EU 2022/2555)?

Accepted Answer

Yes, Ensure the Instance Metadata Service Version 2 (IMDSv2) method is enabled to help protect access and control of AWS Elastic Compute Cloud (AWS EC2) instance metadata.

Question 3

Is monitoring enforced for NIS2 Directive (EU 2022/2555)?

Accepted Answer

Yes, Enable this rule to help improve AWS Elastic Compute Cloud (AWS EC2) instance monitoring on the AWS EC2 console, which displays monitoring graphs with a 1-minute period for the instance.

Question 4

Is security_group_ingress_rules enforced for NIS2 Directive (EU 2022/2555)?

Accepted Answer

Yes, This control checks whether the VPC security groups allow ingress from 0.0.0.0/0 or ::/0 to cassandra ports 7199 or 9160 or 8888. This control passes when none of the rules in a security group allow ingress traffic from 0.0.0.0/0 from ports 7199 or 9160 or 8888.

AWS EC2 Instance Terraform module

Terraform Module Source