Amazon Elastic Compute Cloud

953 Pages·2017·10.01 MB·English

by  Amazon Web Services

Amazon Elastic Compute Cloud
User Guide for Linux Instances
Amazon Elastic Compute Cloud
User Guide for Linux Instances
Amazon Elastic Compute Cloud: User Guide for Linux Instances
Copyright © 2022 Amazon Web Services, Inc. and/or its affiliates. All rights reserved.
Amazon's trademarks and trade dress may not be used in connection with any product or service that is not
Amazon's, in any manner that is likely to cause confusion among customers, or in any manner that disparages or
discredits Amazon. All other trademarks not owned by Amazon are the property of their respective owners, who may
or may not be affiliated with, connected to, or sponsored by Amazon.
Amazon Elastic Compute Cloud
User Guide for Linux Instances
Table of Contents
What is Amazon EC2? ......................................................................................................................... 1
Features of Amazon EC2............................................................................................................. 1
How to get started with Amazon EC2 ........................................................................................... 1
Related services......................................................................................................................... 2
Access Amazon EC2 .................................................................................................................... 3
Pricing for Amazon EC2 .............................................................................................................. 3
PCI DSS compliance.................................................................................................................... 4
Set up.............................................................................................................................................. 5
Sign up for AWS ........................................................................................................................ 5
Create a key pair ........................................................................................................................ 5
Create a security group ............................................................................................................... 6
Get started tutorial ............................................................................................................................ 9
Overview................................................................................................................................... 9
Prerequisites............................................................................................................................ 10
Step 1: Launch an instance ........................................................................................................ 10
Step 2: Connect to your instance ............................................................................................... 11
Step 3: Clean up your instance.................................................................................................. 11
Next steps............................................................................................................................... 12
Best practices.................................................................................................................................. 13
Tutorials.......................................................................................................................................... 15
Install LAMP on Amazon Linux 2022.......................................................................................... 15
Step 1: Prepare the LAMP server ........................................................................................ 16
Step 2: Test your LAMP server ........................................................................................... 18
Step 3: Secure the database server ..................................................................................... 20
Step 4: (Optional) Install phpMyAdmin ................................................................................ 21
Troubleshoot................................................................................................................... 23
Related topics.................................................................................................................. 23
Install LAMP on Amazon Linux 2................................................................................................ 24
Step 1: Prepare the LAMP server ........................................................................................ 24
Step 2: Test your LAMP server ........................................................................................... 28
Step 3: Secure the database server ..................................................................................... 29
Step 4: (Optional) Install phpMyAdmin ................................................................................ 30
Troubleshoot................................................................................................................... 33
Related topics.................................................................................................................. 33
Install LAMP on the Amazon Linux AMI ....................................................................................... 34
Step 1: Prepare the LAMP server ........................................................................................ 34
Step 2: Test your Lamp server ........................................................................................... 37
Step 3: Secure the database server ..................................................................................... 38
Step 4: (Optional) Install phpMyAdmin ................................................................................ 40
Troubleshoot................................................................................................................... 42
Related topics.................................................................................................................. 43
Configure SSL/TLS on Amazon Linux 2022 .................................................................................. 43
Prerequisites.................................................................................................................... 44
Step 1: Enable TLS on the server ....................................................................................... 45
Step 2: Obtain a CA-signed certificate ................................................................................. 47
Step 3: Test and harden the security configuration ............................................................... 51
Troubleshoot................................................................................................................... 54
Certificate automation: Let's Encrypt with Certbot on Amazon Linux 2022 ............................... 54
Configure SSL/TLS on Amazon Linux 2 ....................................................................................... 58
Prerequisites.................................................................................................................... 59
Step 1: Enable TLS on the server ....................................................................................... 45
Step 2: Obtain a CA-signed certificate ................................................................................. 61
Step 3: Test and harden the security configuration ............................................................... 66
Troubleshoot................................................................................................................... 68
iii
Amazon Elastic Compute Cloud
User Guide for Linux Instances
Certificate automation: Let's Encrypt with Certbot on Amazon Linux 2 .................................... 69
Configure SSL/TLS with the Amazon Linux AMI ............................................................................ 73
Prerequisites.................................................................................................................... 74
Step 1: Enable TLS on the server ....................................................................................... 74
Step 2: Obtain a CA-signed certificate ................................................................................. 76
Step 3: Test and harden the security configuration ............................................................... 80
Troubleshoot................................................................................................................... 82
Increase size of Amazon EBS volume .......................................................................................... 83
Step 1: Launch an instance with added volume .................................................................... 84
Step 2: Make the data volume available for use ................................................................... 86
Step 3: Increase the size of the data volume ........................................................................ 87
Step 4: Extend the file system ........................................................................................... 89
Step 5: Clean up.............................................................................................................. 90
Host a WordPress blog on Amazon Linux 2022 ............................................................................ 91
Prerequisites.................................................................................................................... 91
Install WordPress.............................................................................................................. 91
Next steps....................................................................................................................... 98
Help! My public DNS name changed and now my blog is broken ............................................. 99
Host a WordPress blog on Amazon Linux 2 ................................................................................ 100
Prerequisites.................................................................................................................. 101
Install WordPress............................................................................................................ 101
Next steps..................................................................................................................... 106
Help! My public DNS name changed and now my blog is broken ........................................... 107
Amazon Machine Images ................................................................................................................. 109
Use an AMI............................................................................................................................ 109
Create your own AMI .............................................................................................................. 110
Buy, share, and sell AMIs ......................................................................................................... 110
Deregister your AMI ................................................................................................................ 111
Amazon Linux 2 and Amazon Linux AMI .................................................................................... 111
AMI types.............................................................................................................................. 111
Launch permissions......................................................................................................... 111
Storage for the root device .............................................................................................. 112
Virtualization types................................................................................................................. 114
Boot modes........................................................................................................................... 116
Launch an instance ......................................................................................................... 117
AMI boot mode parameter.............................................................................................. 118
Instance type boot mode ................................................................................................. 119
Instance boot mode ........................................................................................................ 120
Operating system boot mode........................................................................................... 121
Set AMI boot mode........................................................................................................ 122
UEFI variables................................................................................................................ 124
UEFI Secure Boot ............................................................................................................ 125
Find a Linux AMI.................................................................................................................... 134
Find a Linux AMI using the Amazon EC2 console ................................................................ 134
Find an AMI using the AWS CLI ........................................................................................ 135
Find the latest Amazon Linux AMI using Systems Manager ................................................... 135
Use a Systems Manager parameter to find an AMI .............................................................. 136
Shared AMIs........................................................................................................................... 139
Verified provider............................................................................................................. 139
Find shared AMIs ............................................................................................................ 140
Make an AMI public ........................................................................................................ 142
Share an AMI with organizations or OUs ........................................................................... 144
Share an AMI with specific AWS accounts .......................................................................... 151
Cancel having an AMI shared with your account ................................................................. 153
Use bookmarks.............................................................................................................. 154
Guidelines for shared Linux AMIs ...................................................................................... 155
Paid AMIs.............................................................................................................................. 159
iv
Amazon Elastic Compute Cloud
User Guide for Linux Instances
Sell your AMI ................................................................................................................. 159
Find a paid AMI.............................................................................................................. 159
Purchase a paid AMI ....................................................................................................... 160
Get the product code for your instance ............................................................................. 161
Use paid support ............................................................................................................ 161
Bills for paid and supported AMIs ..................................................................................... 162
Manage your AWS Marketplace subscriptions ..................................................................... 162
AMI lifecycle.......................................................................................................................... 162
Create an AMI ................................................................................................................ 163
Copy an AMI .................................................................................................................. 199
Store and restore an AMI ................................................................................................ 205
Deprecate an AMI ........................................................................................................... 211
Deregister your AMI ........................................................................................................ 216
Recover AMIs from the Recycle Bin ................................................................................... 222
Automate the EBS-backed AMI lifecycle ............................................................................ 225
Use encryption with EBS-backed AMIs ....................................................................................... 225
Instance-launching scenarios............................................................................................ 226
Image-copying scenarios.................................................................................................. 228
Monitor AMI events ................................................................................................................ 230
AMI events.................................................................................................................... 230
Create Amazon EventBridge rules ..................................................................................... 232
Understand AMI billing........................................................................................................... 234
AMI billing fields............................................................................................................ 234
Find AMI billing information............................................................................................ 236
Verify AMI charges on your bill ........................................................................................ 237
Amazon Linux........................................................................................................................ 238
Amazon Linux availability ................................................................................................ 238
Connect to an Amazon Linux instance ............................................................................... 238
Identify Amazon Linux images ......................................................................................... 239
AWS command line tools ................................................................................................. 240
Package repository......................................................................................................... 241
Extras library (Amazon Linux 2) ........................................................................................ 243
Amazon Linux 2 supported kernels ................................................................................... 244
Access source packages for reference ................................................................................ 245
cloud-init....................................................................................................................... 245
Subscribe to Amazon Linux notifications ........................................................................... 247
Run Amazon Linux 2 on premises ..................................................................................... 248
Kernel Live Patching ....................................................................................................... 252
User provided kernels ............................................................................................................. 258
HVM AMIs (GRUB) .......................................................................................................... 258
Paravirtual AMIs (PV-GRUB) ............................................................................................. 259
Configure the MATE desktop connection ................................................................................... 263
Prerequisite.................................................................................................................... 264
Configure the RDP connection ......................................................................................... 264
AMI quotas............................................................................................................................ 266
Request a quota increase for AMIs .................................................................................... 266
Instances....................................................................................................................................... 268
Instances and AMIs ................................................................................................................. 268
Instances....................................................................................................................... 269
AMIs............................................................................................................................. 271
Instance types........................................................................................................................ 271
Instance type names ....................................................................................................... 271
Available instance types .................................................................................................. 272
Hardware specifications................................................................................................... 278
AMI virtualization types ................................................................................................... 279
Instances built on the Nitro System .................................................................................. 279
Networking and storage features ...................................................................................... 280
v
Amazon Elastic Compute Cloud
User Guide for Linux Instances
Instance limits................................................................................................................ 284
General purpose............................................................................................................. 284
Compute optimized ........................................................................................................ 335
Memory optimized .......................................................................................................... 348
Storage optimized.......................................................................................................... 367
Accelerated computing.................................................................................................... 378
Find an instance type ...................................................................................................... 417
Get recommendations..................................................................................................... 418
Change the instance type ................................................................................................ 422
Mac instances......................................................................................................................... 430
Considerations................................................................................................................ 430
Instance readiness.......................................................................................................... 431
Launch a Mac instance .................................................................................................... 431
Connect to your Mac instance .......................................................................................... 433
Modify macOS screen resolution on Mac instances .............................................................. 435
EC2 macOS AMIs ............................................................................................................ 435
Update the operating system and software ....................................................................... 436
EC2 macOS Init .............................................................................................................. 437
EC2 System Monitoring for macOS ................................................................................... 437
Increase the size of an EBS volume on your Mac instance .................................................... 437
Stop and terminate your Mac instance .............................................................................. 438
Subscribe to macOS AMI notifications ............................................................................... 438
Release the Dedicated Host for your Mac instance .............................................................. 439
Instance purchasing options ..................................................................................................... 439
Determine the instance lifecycle ....................................................................................... 440
On-Demand Instances..................................................................................................... 441
Reserved Instances......................................................................................................... 445
Scheduled Instances........................................................................................................ 489
Spot Instances................................................................................................................ 491
Dedicated Hosts............................................................................................................. 555
Dedicated Instances........................................................................................................ 591
On-Demand Capacity Reservations ................................................................................... 596
Instance lifecycle.................................................................................................................... 633
Instance launch.............................................................................................................. 635
Instance stop and start (Amazon EBS-backed instances only) ................................................ 635
Instance hibernate (Amazon EBS-backed instances only) ...................................................... 635
Instance reboot.............................................................................................................. 636
Instance retirement......................................................................................................... 636
Instance termination....................................................................................................... 636
Differences between reboot, stop, hibernate, and terminate ................................................. 637
Launch.......................................................................................................................... 638
Stop and start ................................................................................................................ 676
Hibernate...................................................................................................................... 682
Reboot.......................................................................................................................... 699
Retire............................................................................................................................ 700
Terminate...................................................................................................................... 703
Recover......................................................................................................................... 710
Connect................................................................................................................................. 714
Connect to your instance ................................................................................................. 714
Connect your instance to a resource ................................................................................. 742
Configure instances................................................................................................................. 781
Common configuration scenarios ...................................................................................... 781
Manage software............................................................................................................ 782
Manage users................................................................................................................. 787
Processor state control .................................................................................................... 790
I/O scheduler................................................................................................................. 797
Set the time.................................................................................................................. 798
vi
Amazon Elastic Compute Cloud
User Guide for Linux Instances
Optimize CPU options ..................................................................................................... 805
Change the hostname..................................................................................................... 834
Set up dynamic DNS....................................................................................................... 837
Run commands at launch ................................................................................................ 839
Instance metadata and user data ...................................................................................... 846
Elastic Inference..................................................................................................................... 902
Identify instances................................................................................................................... 902
Inspect the instance identity document ............................................................................. 902
Inspect the system UUID ................................................................................................. 902
Inspect the system virtual machine generation identifier ..................................................... 903
Fleets............................................................................................................................................ 908
EC2 Fleet............................................................................................................................... 908
EC2 Fleet limitations ....................................................................................................... 909
Burstable performance instances ...................................................................................... 909
EC2 Fleet request types ................................................................................................... 910
EC2 Fleet configuration strategies .................................................................................... 928
Work with EC2 Fleets ...................................................................................................... 952
Spot Fleet.............................................................................................................................. 970
Spot Fleet request types ................................................................................................. 970
Spot Fleet configuration strategies ................................................................................... 970
Work with Spot Fleets ..................................................................................................... 995
CloudWatch metrics for Spot Fleet .................................................................................. 1015
Automatic scaling for Spot Fleet..................................................................................... 1017
Monitor fleet events .............................................................................................................. 1023
EC2 Fleet event types................................................................................................... 1024
Spot Fleet event types.................................................................................................. 1028
Create EventBridge rules ................................................................................................ 1033
Tutorials.............................................................................................................................. 1039
Tutorial: Use EC2 Fleet with instance weighting ................................................................ 1040
Tutorial: Use EC2 Fleet with On-Demand as the primary capacity ........................................ 1042
Tutorial: Launch On-Demand Instances using targeted Capacity Reservations ........................ 1043
Tutorial: Use Spot Fleet with instance weighting ............................................................... 1048
Example configurations......................................................................................................... 1050
EC2 Fleet example configurations ................................................................................... 1050
Spot Fleet example configurations.................................................................................. 1065
Fleet quotas......................................................................................................................... 1077
Request a quota increase for target capacity .................................................................... 1078
Monitor....................................................................................................................................... 1079
Automated and manual monitoring........................................................................................ 1080
Automated monitoring tools.......................................................................................... 1080
Manual monitoring tools............................................................................................... 1081
Best practices for monitoring ................................................................................................. 1081
Monitor the status of your instances ....................................................................................... 1082
Instance status checks................................................................................................... 1082
State change events ...................................................................................................... 1089
Scheduled events.......................................................................................................... 1090
Monitor your instances using CloudWatch ................................................................................ 1113
Enable detailed monitoring............................................................................................ 1114
List available metrics..................................................................................................... 1116
Get statistics for metrics................................................................................................ 1128
Graph metrics.............................................................................................................. 1136
Create an alarm............................................................................................................ 1136
Create alarms that stop, terminate, reboot, or recover an instance ....................................... 1138
Automate using EventBridge .................................................................................................. 1149
Amazon EC2 event types ............................................................................................... 1149
Monitor memory and disk metrics .......................................................................................... 1150
Collect metrics using the CloudWatch agent ..................................................................... 1150
vii
Amazon Elastic Compute Cloud
User Guide for Linux Instances
Deprecated: Collect metrics using the CloudWatch monitoring scripts .................................. 1150
Log API calls with AWS CloudTrail .......................................................................................... 1158
Amazon EC2 and Amazon EBS information in CloudTrail .................................................... 1158
Understand Amazon EC2 and Amazon EBS log file entries .................................................. 1159
Audit users that connect via EC2 Instance Connect ............................................................ 1160
Networking .................................................................................................................................. 1162
Regions and Zones ................................................................................................................ 1162
Regions....................................................................................................................... 1163
Availability Zones.......................................................................................................... 1167
Local Zones.................................................................................................................. 1171
Wavelength Zones........................................................................................................ 1173
AWS Outposts.............................................................................................................. 1175
Instance IP addressing ........................................................................................................... 1176
Private IPv4 addresses................................................................................................... 1177
Public IPv4 addresses.................................................................................................... 1177
Elastic IP addresses (IPv4) .............................................................................................. 1178
IPv6 addresses.............................................................................................................. 1178
Work with the IPv4 addresses for your instances ............................................................... 1179
Work with the IPv6 addresses for your instances ............................................................... 1181
Multiple IP addresses.................................................................................................... 1183
EC2 instance hostnames ................................................................................................ 1191
Instance hostname types ....................................................................................................... 1192
Types of EC2 hostnames ................................................................................................ 1192
Where you see Resource name and IP name ..................................................................... 1193
How to decide whether to choose Resource name or IP name ............................................. 1194
Modify Hostname type and DNS Hostname configurations ................................................. 1195
Bring your own IP addresses .................................................................................................. 1196
BYOIP definitions.......................................................................................................... 1196
Requirements and quotas .............................................................................................. 1197
Onboarding prerequisites............................................................................................... 1197
Onboard your BYOIP ..................................................................................................... 1203
Work with your address range ........................................................................................ 1205
Validate your BYOIP ...................................................................................................... 1206
Learn more.................................................................................................................. 1209
Assigning prefixes................................................................................................................. 1209
Basics for assigning prefixes ........................................................................................... 1210
Considerations and limits for prefixes .............................................................................. 1210
Work with prefixes........................................................................................................ 1210
Elastic IP addresses ............................................................................................................... 1220
Elastic IP address pricing ............................................................................................... 1220
Elastic IP address basics ................................................................................................. 1221
Work with Elastic IP addresses....................................................................................... 1221
Elastic IP address limit .................................................................................................. 1232
Network interfaces................................................................................................................ 1233
Network interface basics ................................................................................................ 1234
Network cards.............................................................................................................. 1235
IP addresses per network interface per instance type ........................................................ 1236
Work with network interfaces ........................................................................................ 1257
Best practices for configuring network interfaces .............................................................. 1264
Scenarios for network interfaces ..................................................................................... 1266
Requester-managed network interfaces........................................................................... 1268
Network bandwidth.............................................................................................................. 1269
Available instance bandwidth......................................................................................... 1269
Monitor instance bandwidth........................................................................................... 1270
Enhanced networking ............................................................................................................ 1271
Enhanced networking support ........................................................................................ 1271
Enable enhanced networking on your instance................................................................. 1272
viii
Amazon Elastic Compute Cloud
User Guide for Linux Instances
Elastic Network Adapter (ENA) ....................................................................................... 1272
ENA Express................................................................................................................. 1281
Intel 82599 VF............................................................................................................. 1288
Operating system optimizations..................................................................................... 1293
Network performance metrics ........................................................................................ 1294
Troubleshoot ENA......................................................................................................... 1299
Elastic Fabric Adapter ............................................................................................................ 1307
EFA basics.................................................................................................................... 1308
Supported interfaces and libraries.................................................................................. 1309
Supported instance types .............................................................................................. 1309
Supported operating systems ......................................................................................... 1310
EFA limitations............................................................................................................. 1310
Get started with EFA and MPI ........................................................................................ 1311
Get started with EFA and NCCL...................................................................................... 1321
Work with EFA ............................................................................................................. 1348
Monitor an EFA ............................................................................................................ 1350
Verify the EFA installer using a checksum ........................................................................ 1351
Placement groups................................................................................................................. 1355
Placement group strategies ............................................................................................ 1355
Placement group rules and limitations ............................................................................ 1357
Working with placement groups..................................................................................... 1359
Share a placement group ............................................................................................... 1367
Placement groups on AWS Outposts ............................................................................... 1370
Network MTU....................................................................................................................... 1371
Jumbo frames (9001 MTU)............................................................................................ 1372
Path MTU Discovery ...................................................................................................... 1372
Check the path MTU between two hosts .......................................................................... 1373
Check and set the MTU on your Linux instance ................................................................. 1373
Troubleshoot................................................................................................................ 1374
Virtual private clouds ............................................................................................................ 1374
Your default VPCs......................................................................................................... 1374
Create additional VPCs .................................................................................................. 1375
Access the internet from your instances ........................................................................... 1376
SSH access to your instances .......................................................................................... 1376
EC2-Classic........................................................................................................................... 1376
Detect supported platforms ........................................................................................... 1377
Instance types available in EC2-Classic ............................................................................ 1377
Differences between instances in EC2-Classic and a VPC .................................................... 1378
Share and access resources between EC2-Classic and a VPC ................................................ 1381
ClassicLink................................................................................................................... 1382
Migrate from EC2-Classic to a VPC .................................................................................. 1393
Security....................................................................................................................................... 1400
Infrastructure security........................................................................................................... 1400
Network isolation......................................................................................................... 1401
Isolation on physical hosts ............................................................................................. 1401
Controlling network traffic ............................................................................................. 1401
Resilience............................................................................................................................. 1402
Data protection.................................................................................................................... 1402
Amazon EBS data security............................................................................................. 1403
Encryption at rest ......................................................................................................... 1403
Encryption in transit..................................................................................................... 1404
Identity and access management ............................................................................................ 1405
Network access to your instance ..................................................................................... 1406
Amazon EC2 permission attributes .................................................................................. 1406
IAM and Amazon EC2 .................................................................................................... 1406
IAM policies................................................................................................................. 1408
AWS managed policies.................................................................................................. 1462
ix
Amazon Elastic Compute Cloud
User Guide for Linux Instances
IAM roles..................................................................................................................... 1463
Network access............................................................................................................. 1474
Key pairs............................................................................................................................. 1478
Create key pairs............................................................................................................ 1478
Tag a public key........................................................................................................... 1483
Describe public keys...................................................................................................... 1485
Delete a public key ....................................................................................................... 1489
Add or remove a public key on your instance ................................................................... 1489
Verify keys................................................................................................................... 1491
Security groups.................................................................................................................... 1492
Security group rules ...................................................................................................... 1494
Connection tracking ...................................................................................................... 1495
Default and custom security groups ................................................................................ 1497
Work with security groups ............................................................................................. 1498
Security group rules for different use cases ...................................................................... 1508
AWS PrivateLink................................................................................................................... 1513
Create an interface VPC endpoint ................................................................................... 1513
Create an endpoint policy .............................................................................................. 1514
Update management............................................................................................................ 1515
Compliance validation........................................................................................................... 1515
NitroTPM............................................................................................................................. 1515
Considerations.............................................................................................................. 1516
Prerequisites................................................................................................................ 1516
Create a Linux AMI for NitroTPM support ......................................................................... 1517
Verify whether an AMI is enabled for NitroTPM ................................................................ 1517
Enable or stop using NitroTPM on an instance .................................................................. 1518
Storage....................................................................................................................................... 1520
Amazon EBS ........................................................................................................................ 1521
Features of Amazon EBS ................................................................................................ 1522
EBS volumes................................................................................................................ 1523
EBS snapshots.............................................................................................................. 1575
Amazon Data Lifecycle Manager ..................................................................................... 1660
EBS data services.......................................................................................................... 1709
EBS volumes and NVMe ................................................................................................ 1736
EBS optimization.......................................................................................................... 1741
EBS performance.......................................................................................................... 1772
EBS CloudWatch metrics ................................................................................................ 1787
EBS EventBridge events................................................................................................. 1794
EBS quotas.................................................................................................................. 1805
Instance store....................................................................................................................... 1805
Instance store lifetime ................................................................................................... 1806
Instance store volumes.................................................................................................. 1806
Add instance store volumes ........................................................................................... 1817
SSD instance store volumes ........................................................................................... 1821
Instance store swap volumes .......................................................................................... 1822
Optimize disk performance ............................................................................................ 1825
File storage.......................................................................................................................... 1825
Amazon S3.................................................................................................................. 1826
Amazon EFS................................................................................................................. 1827
Amazon FSx................................................................................................................. 1830
Instance volume limits ........................................................................................................... 1834
Nitro System volume limits ............................................................................................ 1835
Linux-specific volume limits ........................................................................................... 1835
Bandwidth versus capacity ............................................................................................. 1835
Root device volume .............................................................................................................. 1835
Root device storage concepts......................................................................................... 1836
Choose an AMI by root device type ................................................................................. 1837
x