Category: Amazon EC2

One way to alleviate the pain of drift in your Amazon Web Services (AWS) workloads is to use a GitOps workflow to automate Amazon Machine Image (AMI) builds with AWS CodePipeline. In this post, we show you how to deploy a continuous integration and continuous delivery (CI/CD) pipeline, managed by CodePipeline, to build AMIs.

Are your infrastructure as code (IaC) Terraform deployments on the Amazon Web Services (AWS) Cloud protected against drift? IaC drift, which can leave your data and resources exposed to security risks, is especially difficult to track down and remove in an environment that spans multiple AWS accounts and AWS Regions. You can do it though, and in this post we show you how.

Learn how to use an Amazon CloudWatch agent to automate the collection of custom metrics for two Amazon EC2 instances. The solution is based on a tagging strategy combined with AWS Systems Manager State Manager to enforce specific CloudWatch agent configurations for EC2 instances that are tagged appropriately.

Use a distributed Microsoft Active Directory to authenticate workloads on AWS.

Learn how to automate Ansible playbook deployment with Amazon EC2 and GitHub either by using an AWS CloudFormation template or by following a step-by-step setup.

Learn how to create an AWS CloudFormation template that runs code prior to terminating an EC2 Auto Scaling instance.

Learn how to securely access Amazon S3 during bootstrapping by using S3-authenticated objects.

Best practices for addressing security and access control and configuration when bootstrapping EC2 instances in the Amazon Web Services Cloud.

Learn how to build an AMI from an Amazon EC2 instance at CloudFormation launch time, and then use the AMI for fast bootstrapping of the Auto Scaling group instances.

In this second post of a two-part series, learn how to enhance the security of your bastion hosts by using Amazon EC2 Instance Connect. With EC2 Instance Connect, you no longer have to associate a key pair to the instance, and you don’t need to permanently add user keys to authorized keys.