Unused Virtual Private Gateways Should Be Removed
More Info:
Unused Amazon Virtual Private Gateways should be removed in order to adhere to best practices and to avoid reaching the service limit.Risk Level
LowAddress
Operational Maturity, SecurityCompliance Standards
CBPTriage and Remediation
Remediation
Using Console
Using Console
To remediate the issue of Unused Virtual Private Gateways in AWS, you can follow these steps using the AWS Management Console:
- Login to AWS Console: Navigate to the AWS Management Console at https://aws.amazon.com/ and login with your credentials.
- Access VPC Dashboard: Go to the VPC dashboard by selecting the “Services” dropdown menu at the top left corner, then selecting “VPC” under the Networking & Content Delivery section.
-
Identify Unused Virtual Private Gateways:
- In the VPC dashboard, click on “Virtual Private Gateways” on the left-hand side menu.
- Review the list of Virtual Private Gateways to identify any that are not associated with any VPCs or are no longer in use.
-
Dissociate and Delete Unused Virtual Private Gateways:
- Select the unused Virtual Private Gateway that you want to remove.
- Click on the “Actions” dropdown menu and choose “Detach from VPC” to dissociate the Virtual Private Gateway from the VPC.
- Once detached, select the Virtual Private Gateway again and click on the “Actions” dropdown menu, then choose “Delete Virtual Private Gateway” to remove it completely.
-
Confirm Deletion:
- A confirmation dialog will appear asking you to confirm the deletion of the Virtual Private Gateway. Confirm the action to proceed with the deletion.
-
Verify Removal:
- After deleting the Virtual Private Gateway, verify that it has been successfully removed from the list of Virtual Private Gateways in the VPC dashboard.
Using CLI
Using CLI
To remediate the issue of unused Virtual Private Gateways in AWS, you can follow the steps below using AWS CLI:
- List all the Virtual Private Gateways in your AWS account:
- Identify the Virtual Private Gateways that are not associated with any VPC. These are the ones that are unused.
- To detach the Virtual Private Gateway from a VPC, you can use the following command:
- Once you have detached the Virtual Private Gateway from all VPCs, you can delete the Virtual Private Gateway using the following command:
- Confirm that the Virtual Private Gateway has been deleted by listing all the Virtual Private Gateways again:
Using Python
Using Python
To remediate the issue of unused Virtual Private Gateways in AWS using Python, you can follow these steps:Make sure you have the necessary permissions in your AWS IAM role to delete Virtual Private Gateways before running this script. Also, ensure you have installed the Boto3 library (
- Use Boto3, the AWS SDK for Python, to list all the Virtual Private Gateways in your AWS account.
- Use Boto3 to list all the VPCs in your AWS account.
- Compare the Virtual Private Gateways with the VPCs to identify any unused Virtual Private Gateways.
- If any Virtual Private Gateways are found to be unused, delete them using Boto3.
pip install boto3) and configured your AWS credentials.