Amazon EC2 AMI Lifecycle (Part 1)

By Ashwin Venugopal -

 ECS Vs. EC2 Vs. S3 Vs. Lambda: A 2025 Comparison Guide




Introduction

An Amazon Machine Image (AMI) is an image that includes the necessary software setup to initialize and run an instance. When launching an instance, you need to select an AMI. You have the option to utilize AMIs offered by Amazon or to create your own. The AMI has to be in the AWS Region where you plan to launch your instance.

The lifecycle of an AMI includes creating, copying, deprecating, disabling, and deleting (deregistering) the AMI.

Create AMIs

Although Amazon offers AMIs for launching your instances, you have the option to develop custom AMIs that suit your specific requirements. To create a personalized AMI, start by launching an instance from a pre-existing AMI, make your customizations to the instance (such as installing software and adjusting operating system settings), and then generate an AMI from that instance. All customizations made to the instance will be preserved in the new AMI, ensuring that any instances launched from it will incorporate those modifications.

Copy AMIs

An AMI can only be used to launch an instance in the specific AWS Region where it resides. If you want to launch instances with identical configurations across different Regions, you will need to copy the AMI to those other Regions.

Deprecate AMIs

 To designate an AMI as outdated or superseded, you have the option to specify a deprecation date that is either immediate or set for a future time. While deprecated AMIs will not appear in AMI listings, they can still be utilized by users and services if they are aware of the AMI ID.

Disable AMIs

To temporarily stop an AMI from being utilized, you have the option to disable it. When an AMI is disabled, it cannot be used to launch new instances. However, if you choose to re-enable the AMI, it can once again be employed to launch instances. Keep in mind that disabling an AMI does not impact any existing instances that were already launched from it.

Deregister (delete) AMIs

When an AMI is no longer necessary, you can deregister it to stop it from being used for launching new instances. If the AMI complies with a retention rule, it is sent to the Recycle Bin, where it can be restored prior to the expiration of its retention period; otherwise, it will be permanently deleted. If it fails to meet a retention rule, it will be permanently deleted right away. Keep in mind that deregistering an AMI does not impact any existing instances that were created from that AMI.

Automate the AMI lifecycle

Amazon Data Lifecycle Manager allows you to automate the creation, retention, copying, deprecation, and deregistration of Amazon EBS-backed AMIs along with their associated snapshots. Additionally, EC2 Image Builder can be utilized to automate the creation, management, and deployment of tailored AMIs.

Conclusion

The overview of the lifecycle of an AMI is explained.

























Comments

Post a Comment

Popular posts from this blog

Deployment (Part 3)

By Ashwin Venugopal -
Image
  To read part 1, please click  here To read part 2, please click  here Microsoft Monitoring Agent (MMA) MMA is used across multiple Microsoft solutions and has undergone a few name changes as its features and functionality have evolved. If it is being considered to be used, then following areas should be covered during a Microsoft Sentinel deployment project: Consider the timelines and the strategy for a migration to AMA (Azure Monitor Agent) before the MMA end-of-life.  Consider the central deployment and management methodology for MMA. Determine which endpoints are in scope for deployment as these affect the log ingestion volume significantly.  Azure Monitor Agent (AMA) Organizations with MMA as the main Microsoft Sentinel agent should start planning the migration to AMA as soon as possible to avoid a rushed migration. One of the main advantages of AMA is the ability to control the log collection policy centrally and apply different policies against different...
Read more

Deployment (Part 1)

By Ashwin Venugopal -
Image
  To read part 2, please click  here To read part 3, please click  here Azure Resources Microsoft Sentinel needs following resources to be created: Subscription (if a dedicated subscription(s) will be used) Resource group(s) Log Analytics workspace(s) Automation rules/playbook Alert rules Workbooks Microsoft Sentinel offers hundreds of alert rules, workbooks, and automation playbook templates along with hunting scripts. The templates can be used to activate/deploy schedule alerts, create customized dashboards, create automation playbooks and perform threat-hunting activities. Generally, once deployed, the resources created have to be adjusted to match the existing environment, configure local credentials, etc. Methods of deployment: Manual- Administrator can manually configures the Microsoft Sentinel resources with the help of Azure portal. Any manual process has the inherent risks of human operator error, lack of compliance with potential change control procedures, and u...
Read more

Deployment (Part 2)

By Ashwin Venugopal -
Image
  To read part 1, please click  here To read part 3, please click  here Microsoft Sentinel Content Hub Content in Microsoft Sentinel includes any of the following types: Data connectors offer log ingestion from different sources into Microsoft Sentinel. Parsers give log formatting/transformation into ASIM formats, supporting usage across various Microsoft Sentinel content types and scenarios. Workbooks provide monitoring, visualization, and interactively with data in Microsoft Sentinel, highlighting meaningful insights for users.  Analytics rules give alerts that point to relevant SOC actions via incidents.  Hunting Queries are used by SOC teams to proactively hunt for threats in Microsoft Sentinel. Notebooks help SOC teams in using advanced hunting features in Jupyter and Azure Notebooks. Watchlists support the ingestion of specific data for enhanced threat detection and reduced alert fatigue.  Playbooks and Azure Logic Apps Custom Connectors provide featu...
Read more