Documentation
README
Ensure unused ENIs are removed
Description
Identify and delete any unused Amazon AWS Elastic Network Interfaces in order to adhere to best practices and to avoid reaching the service limit. An AWS Elastic Network Interface (ENI) is pronounced unused when is not attached anymore to an EC2 instance.
Rationale
Removing unused ENIs helps maintain a clean environment, reduces potential attack surface, and avoids reaching service limits.
Impact
Deleting an ENI is permanent. Ensure the ENI is truly unused before removal.
Audit Procedure
Using AWS CLI
- Run describe-network-interfaces command:
aws ec2 describe-network-interfaces --region us-east-1 --output json --filters Name=status,Values=available --query "NetworkInterfaces[*].{ENI:NetworkInterfaceId}"
This is the opening of the README. Read the full README on GitHub.