Amazon EC2 is the most popular service from Amazon Web Services and a great general AWS introduction.
The team at AWS constantly improves its Amazon EC2 service by iterating around key offerings such as new instance types, new operating systems, new security features and other enhancements. I believe you’ll find these 5 features useful in your daily life. I worked hard to explain the advantages and drawbacks as clearly as possible. You might disagree with me on some points and if you do, I’d love your feedback.
The New Amazon EC2 Service Feature:
1) New VM Import Options for EC2
Previously it had been a challenge for AWS enterprise customers to use the existing virtualized infrastructure: golden images, importing VMs, deployment process, and licenses. AWS addressed these issues by introducing AWS VM Import/Export and AWS Management Portals for vCenter.
In December 2015, AWS enhanced many features of the above two services by importing multi-volume VMs to EC2 from the AWS Management Portal for vCenter supporting SUSE/SLES 11-12, Oracle Enterprise Linux 6-7, Fedora 19-21, Windows 10 flavors of OSes. However, you need to upgrade the portal or use the latest version of the portal to make these upgrades work.
2) EC2 t2.nano Instance
Amazon introduced a new instance type called t2.nano in the t2 instance family. The introduction of t2.nano was intended to be used by low-traffic websites, microservices, and for dev/test environments with a very low cost. Each t2.nano instance has 512 MiB of memory and 1 vCPU and can run 32 or 64 bit operating systems and applications. These instances support EBS encryption and up to 2 Elastic Network Interfaces per instance that you can use with AWS CloudFormation. Currently, t2.nano instances are available in the following regions: US East (Northern Virginia), US West (Oregon), US West (Northern California), Europe (Ireland), Asia Pacific (Singapore), Asia Pacific (Tokyo), South America (Brazil), and AWS GovCloud (US) regions. Cost is also a compelling reason to use an EC2 t2.nano instance because the per hour price goes as low as $0.0065 for on-demand and a yearly reserved instance cost of $3.125 per month. If you select a 3 years reserved instance the cost comes down to $2.10/month.
3) Instance Protection for Auto Scaling
Autoscaling in AWS EC2 helps you to meet resource demands rapidly. Autoscaling adjusts the EC2 instances during spikes in traffic and scales down when the demand drops off.
AWS has enhanced Autoscaling by providing Instance Protection, which prevents the servers from terminating during the scale-in phase. You have may have many such requirements where you do not want to terminate a particular instance. For example, you have an instance where both app server (e.g. JBoss) and FTP servers are installed and you don’t want either one to be de-commissioned. Or, perhaps, you have an Hadoop master node which is the single point of failure in cases of termination. There are many such examples and it depends on your design and judgment which server needs to be prevented from termination during scale-in.
4) EC2 Dedicated Hosts
In Nov 2015, AWS announced the availability of dedicated hosts. Dedicated hosts are physical servers running underneath everything the with capacity of hosting one or more EC2 instances. But the question is why do we need to use Dedicated Hosts? Assume that you have existing licenses for Oracle Databases and the licenses are usually applied on a server with a certain number of sockets or physical cores. This model works for Oracle licenses as well as licenses for Windows Servers, SQL Servers, and SUSE Linux Enterprise Servers. For these kinds of licenses, AWS introduced dedicated hosts that map these licenses in AWS EC2 instances when you use BYOL (Bring Your Own License). This model allows you to allocate an actual physical server (the Dedicated Host) and then launch one or more EC2 instances of a given type on it. You will be charged for the hosts and not the instances you launch on the dedicated host. With dedicated hosts, you can launch M3, M4, C3, C4, G2, R3, D2, and I2 instances which you must specify while allocating a host.
In addition to allowing you to Bring Your Own License, Amazon EC2 Dedicated Hosts can help you to meet stringent compliance and regulatory requirements, track usage with AWS Config, and control over instance placement at the physical host level.
Let’s take a look at how dedicated host provisioning looks and discuss what each of the parameters mean.
Instance Type: You select a specific type of instance that can be launched on a dedicated host. Remember, you can only launch your specified instance type that you have configured.
Availability Zones: AZ where the dedicated host and its hosted instances will be located.
Allow instance auto-placement: When it is ON, the subsequent launch of the instances will be placed in this dedicated host until it has the needed capacity. Otherwise, you must specify the host.
Quantity: Number of dedicated hosts you want to purchase with this configuration.
Once you allocate host, it will be created and a Host ID generated. The following table shows what kind of dedicated host will be allocated for a particular instance type.
In our configuration, we will receive a dedicated host with 2 sockets and 20 cores that can host 16 m3.large instances. The rests of the steps are as follows:
- From the dedicated host dashboard, select a dedicated host and click on the Actions button. It will allow you to launch instances with an option “Launch Instance(s) onto Host”.
- Select the AMI and the Instance Type (It will only allow the Instance Type you have named during allocation of the host i.e. m3.large in our case).
- The instances launched in a Dedicated Host must reside in a VPC. A single Dedicated Host can contain instances from more than one VPC.
- Selecting Affinity will make sure that the instance will restart on the same host. This is ideal when you do not want the licensed software to run on the wrong host.
An important word of caution, when you launch instances in a Dedicated Host, you do not use the autoscaling feature. Moreover, the Placement Groups in VPC and RDS are not supported.
The pricing structure is as follows. Dedicated Hosts are available with on-demand pricing only with a future roadmap which make this model available for reserved pricing.
5) EC2 Run Command for Linux Instances
In earlier releases of the Amazon EC2 Run command, the support was for Windows instances only. This support offered the administer more than one Windows instances, including installing software, running ad-hoc scripts (Microsoft PowerShell commands), configuring Windows Update settings, and more.
The new Amazon EC2 service features offer the EC2 Run command for Linux instances. Run Command makes use of an agent (amazon-ssm-agent) that runs on each instance. It is available for the following Linux distributions:
- Amazon Linux AMI (64 bit) – 2015.09, 2015.03, 2014.09, and 2014.03.
- Ubuntu Server (64 bit) – 14.04 LTS, 12.04 LTS
- Red Hat Enterprise Linux (64 bit) – 7.x
Here are some of my favorite things that you can do with the Run Command:
- Run shell commands or scripts
- Add users or groups
- Configure user or group permissions
- Start, stop, view all running services
- View system resources & log files
- Install or uninstall applications
- Update a scheduled (cron) task
This feature is available in the US East (Northern Virginia), US West (Oregon), and Europe (Ireland) regions only at this time. There’s no charge for the command, but, as always, you will be billed for other AWS resources that you consume. Eugene Teo has a good blog from December that provides excellent background on this topic SELinux: improve the security of your EC2 servers.
AWS is vibrant, speaks to customers, and take their feedbacks seriously. The team at Amazon Web Services create amazing features and services that make our jobs easier — and more fun. That’s why AWS is the leader in the Cloud industry according to Gartner. I invite you to offer comments, questions and thoughts by starting a discussion below. Beginners who are hungry for greater understanding should take a look at the Cloud Academy course, Amazon EC2 (Elastic Cloud Compute): how to launch you instance in minutes. Cloud Academy offers a standard 7 day trial so, maybe check it out and let us know what you think. We welcome your feedback because we never stop learning and hope you don’t either.
New Content: Platforms, Programming, and DevOps – Something for Everyone
This month our team of expert certification specialists released three new or updated learning paths, 16 courses, 13 hands-on labs, and four lab challenges! New content on Cloud Academy You can always visit our Content Roadmap to see what’s just released as well as what’s coming soon....
Mastering AWS Organizations Service Control Policies
Service Control Policies (SCPs) are IAM-like policies to manage permissions in AWS Organizations. SCPs restrict the actions allowed for accounts within the organization making each one of them compliant with your guidelines. SCPs are not meant to grant permissions; you should consider ...
New Content: Focus on DevOps and Programming Content this Month
This month our team of expert certification specialists released 12 new or updated learning paths, 15 courses, 25 hands-on labs, and four lab challenges! New content on Cloud Academy You can always visit our Content Roadmap to see what’s just released as well as what’s coming soon. Ja...
New Content: Get Ready for the CISM Cert Exam & Learn About Alibaba, Plus All the AWS, GCP, and Azure Courses You Know You Can Count On
This month our team of intrepid certification specialists released five learning paths, seven courses, 19 hands-on labs, and three lab challenges! One particularly interesting new learning path is Certified Information Security Manager (CISM) Foundations. After completing this learn...
Which Certifications Should I Get?
The old AWS slogan, “Cloud is the new normal” is indeed a reality today. Really, cloud has been the new normal for a while now and getting credentials has become an increasingly effective way to quickly showcase your abilities to recruiters and companies. With all that in mind, the s...
The 12 AWS Certifications: Which is Right for You and Your Team?
As companies increasingly shift workloads to the public cloud, cloud computing has moved from a nice-to-have to a core competency in the enterprise. This shift requires a new set of skills to design, deploy, and manage applications in cloud computing. As the market leader and most ma...
AWS Certified Solutions Architect Associate: A Study Guide
Want to take a really impactful step in your technical career? Explore the AWS Solutions Architect Associate certificate. Its new version (SAA-C02) was released on March 23, 2020. The AWS Solutions Architect - Associate Certification (or Sol Arch Associate for short) offers some ...
New Content: AWS Terraform, Java Programming Lab Challenges, Azure DP-900 & DP-300 Certification Exam Prep, Plus Plenty More Amazon, Google, Microsoft, and Big Data Courses
This month our Content Team continues building the catalog of courses for everyone learning about AWS, GCP, and Microsoft Azure. In addition, this month’s updates include several Java programming lab challenges and a couple of courses on big data. In total, we released five new learning...
Where Should You Be Focusing Your AWS Security Efforts?
Another day, another re:Invent session! This time I listened to Stephen Schmidt’s session, “AWS Security: Where we've been, where we're going.” Amongst covering the highlights of AWS security during 2020, a number of newly added AWS features/services were discussed, including: AWS Audit...
AWS re:Invent: 2020 Keynote Top Highlights and More
We’ve gotten through the first five days of the special all-virtual 2020 edition of AWS re:Invent. It’s always a really exciting time for practitioners in the field to see what features and services AWS has cooked up for the year ahead. This year’s conference is a marathon and not a...
WARNING: Great Cloud Content Ahead
At Cloud Academy, content is at the heart of what we do. We work with the world’s leading cloud and operations teams to develop video courses and learning paths that accelerate teams and drive digital transformation. First and foremost, we listen to our customers’ needs and we stay ahea...
Excelling in AWS, Azure, and Beyond – How Danut Prisacaru Prepares for the Future
Meet Danut Prisacaru. Danut has been a Software Architect for the past 10 years and has been involved in Software Engineering for 30 years. He’s passionate about software and learning, and jokes that coding is basically the only thing he can do well (!). We think his enthusiasm shines t...