Skip to main content

ECS Instance Not Bound to Key Pair

ID: rule:aliyun:ecs-instance-not-bind-key-pair
Severity: medium
IaC Types: ROS, Terraform

Description​

Ensures that ECS instances use key pairs for authentication instead of passwords.

Reason for Violation​

Key pair authentication is more secure than password authentication.

Recommendation​

Bind a key pair to the ECS instance and disable password authentication.

Resource Types​

  • ROS: ALIYUN::ECS::Instance
  • ROS: ALIYUN::ECS::InstanceGroup
  • Terraform: alicloud_instance