---
title: EC2 launch templates should not configure network interfaces with public IPs
description: Datadog, the leading service for cloud-scale monitoring.
breadcrumbs: >-
  Docs > Datadog Security > OOTB Rules > EC2 launch templates should not
  configure network interfaces with public IPs
---

# EC2 launch templates should not configure network interfaces with public IPs
 
## Description{% #description %}

This rule evaluates whether Amazon EC2 launch templates are configured to avoid assigning public IP addresses to network interfaces at launch.

Public IP addresses allow resources to be directly accessible from the internet, which can lead to unintended access. Restricting public IP assignment helps protect resources by minimizing exposure to external threats and ensuring controlled access.

## Remediation{% #remediation %}

To update an EC2 launch template and disable public IP assignment, refer to the section [Changing the Default Network Interface Settings](https://docs.aws.amazon.com/autoscaling/ec2/userguide/create-launch-template.html#change-network-interface) in the Amazon EC2 Auto Scaling User Guide.