EC2 Instances Should Not Be Idle
More Info:
Idle AWS EC2 instances should be stopped or terminated in order to optimize AWS costs.Risk Level
LowAddress
Cost optimizationCompliance Standards
AWSWAFTriage and Remediation
Remediation
Using Console
Using Console
The best way to remediate this issue is to stop the idle instances. Here are the step by step instructions to remediate this issue in AWS using the AWS console:
- Log in to the AWS Management Console.
- Click on the EC2 service.
- Select the instances that are idle.
- Click on the “Actions” button and select “Instance State” and then click “Stop”.
- In the confirmation dialog box, click “Yes, Stop”.
- Wait for the instances to stop.
- Once the instances have stopped, select them again.
- Click on the “Actions” button and select “Instance Settings” and then click “Change Shutdown Behavior”.
- In the “Change Shutdown Behavior” dialog box, select “Terminate” and then click “Save”.
- Start the instances again when they are required.
Using CLI
Using CLI
To remediate the EC2 Instances should not be idle misconfiguration in AWS using AWS CLI, follow these steps:
- Open the AWS CLI on your local machine.
-
Run the following command to list all the running instances in your AWS account:
- Identify the idle instances that have been running for a long time and need to be remediated.
-
To stop the idle instances, run the following command:
Replace
<instance-id>with the ID of the idle instance that you want to stop. -
Confirm the action by entering
ywhen prompted. -
After the instance has been stopped, you can start it again using the following command:
Replace
<instance-id>with the ID of the stopped instance that you want to start. -
Confirm the action by entering
ywhen prompted. - Repeat steps 4-7 for any other idle instances that need to be remediated.
- To prevent this misconfiguration from occurring in the future, you can set up CloudWatch alarms to monitor the CPU utilization of your instances and take action if it falls below a certain threshold.
Using Python
Using Python
To remediate the issue of idle EC2 instances in AWS using Python, you can follow the below steps:Note: This is just a sample code and you may need to modify it according to your specific requirements.
- Create a Lambda function in Python that will identify and terminate idle EC2 instances.
- Use the AWS SDK for Python (Boto3) to access the AWS EC2 service and retrieve the list of instances.
- For each instance, check its CPU utilization using CloudWatch metrics. If the CPU utilization is below a certain threshold (e.g., 10%), then terminate the instance using the terminate_instances() method.
- Schedule the Lambda function to run periodically using AWS CloudWatch Events.