Sage-Tips

What is the best practices for maintaining Windows EC2 instances and applying updates?

Best practices for Amazon EC2

• Manage access to AWS resources and APIs using identity federation, IAM users, and IAM roles.
• Implement the least permissive rules for your security group.
• Regularly patch, update, and secure the operating system and applications on your instance.

How do I add an IAM role to multiple EC2 instances?

On the navigation pane, choose > Instances. Select the instance, choose Actions > Instance Settings> Attach/Replace IAM role….2 Answers

1. create 2 managed policies.
2. attach them to the same IAM Role.
3. Attach that IAM Role to the EC2 instance.

What can you use as a common file system for multiple EC2 instances?

Amazon EFS provides scalable file storage for use with Amazon EC2. You can use an EFS file system as a common data source for workloads and applications running on multiple instances.

How does AWS EC2 integrate with Active Directory?

Seamlessly join an instance to an Active Directory domain

1. Open the IAM console.
2. Click Roles in the navigation pane.
3. Click Create Role.
4. Type a name for your role in the Role Name field.
5. Under AWS Service Roles, select Amazon EC2 and then click Select.

What is the best practice for maintaining Windows easy to instance and and applying updates?

Update Windows drivers Leverage Trusted Advisor to keep Amazon EC2 Windows up to date with AWS-provided Windows drivers. Use SNS topics to receive updates for new driver releases. Use the AWS Systems Manager SSM document AWSSupport-UpgradeWindowsAWSDrivers to easily apply the updates across your instances.

Can I use the same IAM role on multiple EC2 instances?

When creating IAM roles, associate least privilege IAM policies that restrict access to the specific API calls the application requires. You can only attach one IAM role to an instance, but you can attach the same role to many instances.

Can IAM user have multiple roles?

Technically, yes, there is a way to assume multiple IAM roles at the same time. But it doesn’t mean what you intend. Assuming an IAM role doesn’t modify who you are and doesn’t modify what permissions you have — contrary to the intuitive interpretation of what it might mean to assume a different identity.

What is NFS and EFS?

Elastic File Service: The AWS NFS Solution If you are running workloads on the Amazon cloud, Amazon Elastic File Service (EFS) is the solution you can use to provide users with NFS capabilities. EFS is a shared file system that can be accessed by machines running on Amazon EC2.

How do I manage Amazon EC2 instances in the ASG?

For example, you can set a condition to add new Amazon EC2 instances in increments to the ASG when the average utilization of your Amazon EC2 fleet is high; and similarly, you can set a condition to remove instances in increments when CPU utilization is low.

How do I change EC2 config settings on Windows?

To change settings using the Ec2 Service Properties dialog box Launch and connect to your Windows instance. From the Start menu, click All Programs, and then click EC2ConfigService Settings. On the General tab of the Ec2 Service Properties dialog box, you can enable or disable the following settings.

How to use group policy to remotely install software?

Use Group Policy to remotely install software 1 Summary. You can assign a program distribution to users or computers. 2 Create a distribution point. Log on to the server as an administrator. 3 Create a Group Policy Object. 4 Assign a package. 5 Publish a package. 6 Redeploy a package. 7 Remove a package.

What is an Amazon EC2 auto scaling group?

An Amazon EC2 Auto Scaling group (ASG) contains a collection of EC2 instances that share similar characteristics and are treated as a logical grouping for the purposes of fleet management and dynamic scaling.