More
EC2 instances should be inside of a VPC
HIGH
AWS
Amazon EC2
NIST.800-53.r5,
This control checks if EC2 instances are launched inside a VPC. This control fails if an EC2 instance is launched in the EC2-Classic network.