Skip to main content

ECS Instances in VPC

ID: rule:aliyun:ecs-instances-in-vpc
Severity: medium

Description

ECS instances should be deployed in VPC (Virtual Private Cloud) networks rather than classic networks. VPC provides better network isolation, security, and flexibility.

Reason for Violation

The ECS instance is not deployed in a VPC, which may result in insufficient network isolation and security.

Recommendation

Deploy the ECS instance in a VPC by specifying the VpcId and VSwitchId properties.

Resource Types

  • ALIYUN::ECS::Instance
  • ALIYUN::ECS::InstanceGroup