EC2 Instances Should Not Reach vCPU Limit
More Info:
Monitoring vCPU-based limits for on-demand EC2 instances avoids resource starvation. Service Quotas is an AWS service that enables you to view and manage your quotas from a central location. Quotas, also referred to as limits, are the maximum value for your resources, actions, and items in your AWS account.Risk Level
MediumAddress
Operational Maturity, ReliabilityCompliance Standards
AWSWAFTriage and Remediation
Remediation
Using Console
Using Console
To remediate the misconfiguration “EC2 Instances Should Not Reach vCPU Limit” in AWS using the AWS console, follow the below steps:
- Open the AWS Management Console and navigate to the EC2 dashboard.
- Select the EC2 instance that is reaching the vCPU limit.
- Click on the “Actions” button and select “Instance Settings” and then click on “Change Instance Type”.
- Select a larger instance type that provides more vCPUs than the current instance type.
- Review the changes and click on “Apply”.
- Once the instance type is changed, the instance will have more vCPUs and the vCPU limit will no longer be reached.
Using CLI
Using CLI
To remediate the EC2 instances reaching vCPU limit misconfiguration in AWS using AWS CLI, follow the below steps:Step 1: Log in to the AWS Management Console.Step 2: Open the AWS CLI on your local machine.Step 3: Use the below command to describe the EC2 instances that have reached the vCPU limit:This command will display the list of instances that have reached the vCPU limit.Step 4: Stop the EC2 instances that have reached the vCPU limit using the below command:Replace the Replace Replace the
<instance-id> with the actual instance ID of the instance that you want to stop.Step 5: Modify the instance type of the stopped instances using the below command:<instance-id> with the actual instance ID of the instance that you want to modify, and <new-instance-type> with the desired instance type.Step 6: Start the modified EC2 instances using the below command:<instance-id> with the actual instance ID of the instance that you want to start.By following these steps, you can remediate the EC2 instances reaching vCPU limit misconfiguration in AWS using AWS CLI.Using Python
Using Python
To remediate the EC2 Instances reaching vCPU limit misconfiguration in AWS using python, you can follow the below steps:Step 1: Identify the EC2 instances which are reaching vCPU limit using the boto3 library in python.Step 2: Stop and start the EC2 instances which are reaching the vCPU limit to remediate the misconfiguration.By following the above steps, you can remediate the EC2 Instances reaching vCPU limit misconfiguration in AWS using python.