lacework-global-160

Ensure No Public Elastic Block Store (EBS) Snapshots

Description

You can back up the data on your Amazon EBS volumes to Amazon S3 by taking point-in-time snapshots. These snapshots can be private, shared with other AWS accounts, or open to the public.

Remediation

1. Log in to the AWS Management Console and select 'EC2' from services.
2. Choose Snapshots under Elastic Block Store in the navigation pane.
3. Select the applicable snapshot.
4. Click 'Modify permissions' on the permissions tab in the bottom pane.
5. Select private on the pop-up modal.
6. Click save.

References

https://docs.aws.amazon.com/securityhub/latest/userguide/ec2-controls.html#ec2-1