Determine if there are any EC2 instances scheduled for retirement and/or maintenance in your AWS account and take the necessary steps (reboot, restart or re-launch) to resolve them. The EC2 instances support multiple types of scheduled events such as Reboot (instance-reboot or system-reboot) - the instance or the underlying host machine is rebooted, Instance Stop (instance-stop) – the instance is stopped and started to migrate it to a new host machine, Instance Retirement (instance-retirement) - the instance is terminated and System Maintenance (system-maintenance) - the instance is taken offline for a short period of time, then rebooted.
This rule can help you with the following compliance standards:
- APRA
- MAS
This rule can help you work with the AWS Well-Architected Framework
This rule resolution is part of the Cloud Conformity Security & Compliance tool for AWS
Monitoring EC2 scheduled events within your AWS account will help you prevent unexpected downtime and data loss, improving the reliability and availability of your AWS EC2 fleet.
Note: This guide assumes that your EC2 instances are associated with Elastic IPs. If your instances do not have Elastic IPs attached, you will have to update their public IP reference(s) in your application code or within the DNS zone file after you stop and start the necessary instances, as each restarted instance gets a new public IP address.
Audit
To determine if Connection Draining is enabled, perform the following:
Remediation / Resolution
To resolve EC2 instances scheduled for retirement/maintenance based on the event type (see Audit section to identify the event type(s) assigned to your instance(s)), perform the following:
Actions for instance-reboot event:
Actions for system-reboot:
No action is required on your end. The system reboot is managed by AWS and occurs during its scheduled maintenance window. AWS will send you an email prior to the system-reboot event with all the necessary details, including the start and the end date of the event.
Actions for instance-stop and instance-retirement events:
Actions for system-maintenance event:
References
- AWS Documentation
- Amazon Elastic Compute Cloud - Instance Lifecycle
- Amazon Elastic Compute Cloud - Scheduled Events for Your Instances
- Amazon Elastic Compute Cloud - Instance Retirement
- Amazon Elastic Compute Cloud - Reboot Your Instance
- AWS Command Line Interface (CLI) Documentation
- ec2
- describe-instance-status
- reboot-instances
- stop-instances
- start-instances
Unlock the Remediation Steps
Gain free unlimited access
to our full Knowledge Base
Over 750 rules & best practices
for and
Get started for FREE
You are auditing:
EC2 Instance Scheduled Events
Risk level: High