AWS - EC2

Amazon Web Services Elastic Compute Cloud (EC2).

Configure AWS - EC2 in Cortex

Run commands in multiple AWS accounts

The EC2 integration supports running commands across multiple AWS accounts in an organization.
To use this feature, configure the parameter AWS organization accounts with a comma-separated list of AWS Organization accounts and the Role name for cross-organization account access parameter with a role name that grants full access to the EC2 API in each account.
Using the roleArn, roleSessionName and roleSessionDuration arguments in EC2 commands will override this feature.

Example

AWS organization accounts

12345678,98765432

Role name for cross-organization account access

CrossAccountAccessRole

In this case, the user configured with Access Key and Secret Key must be able to perform AssumeRole with the RoleArn:
arn:aws:iam::12345678:role/CrossAccountAccessRole
arn:aws:iam::98765432:role/CrossAccountAccessRole

AwsEC2SyncAccounts Script

The script AwsEC2SyncAccounts can be used to configure an AWS - EC2 instance with all accounts in an organization.

Commands

You can execute these commands from the CLI, as part of an automation, or in a playbook.
After you successfully execute a command, a DBot message appears in the War Room with the command details.

aws-ec2-describe-instances

Describes one or more of your instances.

Base Command

aws-ec2-describe-instances

Input

Context Output

Command Example

#### Context Example

```json
{
    "AWS": {
        "EC2": {
            "Instances": [
                {
                    "AmiLaunchIndex": 0,
                    "Architecture": "x86_64",
                    "BlockDeviceMappings": [
                        {
                            "DeviceName": "/dev/dev_name",
                            "Ebs": {
                                "AttachTime": "2020-04-26T15:49:18",
                                "DeleteOnTermination": true,
                                "Status": "attached",
                                "VolumeId": "vol-1"
                            }
                        }
                    ],
                    "CapacityReservationSpecification": {
                        "CapacityReservationPreference": "open"
                    },
                    "ClientToken": "some_token",
                    "CpuOptions": {
                        "CoreCount": 8,
                        "ThreadsPerCore": 2
                    },
                    "EbsOptimized": false,
                    "EnaSupport": true,
                    "HibernationOptions": {
                        "Configured": false
                    },
                    "Hypervisor": "xen",
                    "IamInstanceProfile": {
                        "Arn": "some_arn",
                        "Id": "id"
                    },
                    "ImageId": "ami-id",
                    "InstanceId": "i-id",
                    "InstanceType": "m5.4xlarge",
                    "KeyName": "Aqua",
                    "LaunchTime": "2020-04-26T15:49:17",
                    "Monitoring": {
                        "State": "enabled"
                    },
                    "NetworkInterfaces": [
                        {
                            "Attachment": {
                                "AttachTime": "2020-04-26T15:49:28",
                                "AttachmentId": "eni-attach",
                                "DeleteOnTermination": false,
                                "DeviceIndex": 1,
                                "Status": "attached"
                            },
                            "Description": "Floating network interface providing a fixed IP address for AWS Ground Station to connect to.",
                            "Groups": [
                                {
                                    "GroupId": "sg",
                                    "GroupName": "some_group_name"
                                }
                            ],
                            "Ipv6Addresses": [],
                            "MacAddress": "add",
                            "NetworkInterfaceId": "eni",
                            "OwnerId": "some_id",
                            "PrivateDnsName": "name",
                            "PrivateIpAddress": "1.1.1.1",
                            "PrivateIpAddresses": [
                                {
                                    "Primary": true,
                                    "PrivateDnsName": "name",
                                    "PrivateIpAddress": "1.1.1.1"
                                }
                            ],
                            "SourceDestCheck": true,
                            "Status": "in-use",
                            "SubnetId": "subnet",
                            "VpcId": "vpc"
                        }
                    ],
                    "Placement": {
                        "AvailabilityZone": "us-west-2a",
                        "GroupName": "name",
                        "Tenancy": "dedicated"
                    },
                    "PrivateDnsName": "dns_name",
                    "PrivateIpAddress": "1.1.1.1",
                    "ProductCodes": [],
                    "PublicDnsName": "",
                    "Region": "us-west-2",
                    "RootDeviceName": "/dev/dev_name",
                    "RootDeviceType": "ebs",
                    "SecurityGroups": [
                        {
                            "GroupId": "sg",
                            "GroupName": "name"
                        }
                    ],
                    "SourceDestCheck": true,
                    "State": {
                        "Code": 80,
                        "Name": "stopped"
                    },
                    "StateReason": {
                        "Code": "Client.UserInitiatedShutdown",
                        "Message": "Client.UserInitiatedShutdown: User initiated shutdown"
                    },
                    "StateTransitionReason": "User initiated (2020-04-26 18:28:48 GMT)",
                    "SubnetId": "subnet-1",
                    "Tags": [
                        {
                            "Key": "stack-id",
                            "Value": "some_info"
                        }
                    ],
                    "VirtualizationType": "hvm",
                    "VpcId": "vpc"
                }
            ]
        }
    }
}

Human Readable Output

AWS Instances

ImageId	InstanceId	KeyName	LaunchDate	Monitoring	Name	PublicDNSName	PublicIPAddress	Region	State	Type	aws:cloudformation:logical-id	aws:cloudformation:stack-id	aws:cloudformation:stack-name
ami-1	i-1	Aqua	2020-04-26T15:49:17Z	enabled	Receiver-gs-aqua-receiver			us-west-2	stopped	m5.4xlarge	ReceiverInstance	arn1	name1
ami-2	i-2		2020-08-19T11:23:48Z	disabled	flask-env	some_server	1.2.3.4	us-west-2	running	t2.micro	AWSEBAutoScalingGroup	arn2	name2

aws-ec2-describe-iam-instance-profile-associations

Describes your IAM instance profile associations.

Base Command

aws-ec2-describe-iam-instance-profile-associations

Input

Context Output

Command Example

#### Context Example

```json
{
    "AWS": {
        "EC2": {
            "IamInstanceProfileAssociations": [
                {
                    "AssociationId": "association1",
                    "InstanceId": "instance1",
                    "IamInstanceProfile": {
                        "Arn": "arn:aws:iam::000000000000:instance-profile/eks-00000000-0000-0000-0000-00000000",
                        "Id": "AAAAA"
                    },
                    "State": "associated"
                },
                {
                    "AssociationId": "iip-assoc-0fdeba1a2861d2580", 
                    "InstanceId": "i-06bab8afb71d19fea",
                    "IamInstanceProfile": {
                        "Arn": "arn:aws:iam::000000000000:instance-profile/eks-00000000-0000-0000-0000-00000001",
                        "Id": "CCCCC"
                    }, 
                    "State": "associated"
                }
            ]
        }
    }
}

aws-ec2-describe-images

Describes one or more of the images (AMIs, AKIs, and ARIs) available to you. Images available to you include public images, private images that you own, and private images owned by other AWS accounts but for which you have explicit launch permissions.

Base Command

aws-ec2-describe-images

Input

Context Output

aws-ec2-describe-regions

Describes one or more regions that are currently available to you.

Base Command

aws-ec2-describe-regions

Input

Context Output

Command Example

#### Context Example

```json
{
    "AWS": {
        "Regions": [
            {
                "Endpoint": "ec2.eu-north-1.amazonaws.com",
                "RegionName": "eu-north-1"
            },
            {
                "Endpoint": "ec2.ap-south-1.amazonaws.com",
                "RegionName": "ap-south-1"
            }
        ]
    }
}

Human Readable Output

AWS Regions

Endpoint	RegionName
ec2.eu-north-1.amazonaws.com	eu-north-1
ec2.ap-south-1.amazonaws.com	ap-south-1

aws-ec2-describe-addresses

Describes one or more of your Elastic IP addresses.

Base Command

aws-ec2-describe-addresses

Input

Context Output

Command Example

#### Context Example

```json
{
    "AWS": {
        "EC2": {
            "ElasticIPs": [
                {
                    "AllocationId": "eipalloc-1",
                    "Domain": "vpc",
                    "PublicIp": "1.1.1.1",
                    "PublicIpv4Pool": "amazon",
                    "Region": "us-west-2"
                },
                {
                    "AllocationId": "eipalloc-2",
                    "AssociationId": "eipassoc-2",
                    "Domain": "vpc",
                    "InstanceId": "i-1",
                    "NetworkInterfaceId": "eni-1",
                    "NetworkInterfaceOwnerId": "id",
                    "PrivateIpAddress": "1.2.3.4",
                    "PublicIp": "3.4.5.6",
                    "PublicIpv4Pool": "amazon"
                }
            ]
        }
    }
}

Human Readable Output

AWS EC2 ElasticIPs

AllocationId	Domain	PublicIp	Region
eipalloc-1	vpc	1.1.1.1	us-west-2
eipalloc-2	vpc	1.2.3.4	us-west-2

aws-ec2-describe-snapshots

Describes one or more of the EBS snapshots available to you.

Base Command

aws-ec2-describe-snapshots

Input

Context Output

aws-ec2-describe-launch-templates

Describes one or more launch templates.

Base Command

aws-ec2-describe-launch-templates

Input

Context Output

Command Example

#### Context Example

```json
{
    "AWS": {
        "EC2": {
            "LaunchTemplates": {
                "CreateTime": "2019-04-21T07:54:50",
                "CreatedBy": "some_user",
                "DefaultVersionNumber": 1,
                "LatestVersionNumber": 1,
                "LaunchTemplateId": "lt-1",
                "LaunchTemplateName": "sample_launch_template",
                "Region": "us-west-2"
            }
        }
    }
}

Human Readable Output

AWS EC2 LaunchTemplates

CreateTime	CreatedBy	DefaultVersionNumber	LatestVersionNumber	LaunchTemplateId	LaunchTemplateName	Region
2019-04-21T07:54:50Z	some_user	1	1	lt-1	sample_launch_template	us-west-2

aws-ec2-describe-key-pairs

Describes one or more of your key pairs.

Base Command

aws-ec2-describe-key-pairs

Input

Context Output

aws-ec2-describe-volumes

Command Example

#### Context Example

```json
{
    "AWS": {
        "EC2": {
            "KeyPairs": [
                {
                    "KeyFingerprint": "fp1",
                    "KeyName": "Aqua",
                    "Region": "us-west-2"
                },
                {
                    "KeyFingerprint": "fp2",
                    "KeyName": "Test Keys",
                    "Region": "us-west-2"
                }
            ]
        }
    }
}

Human Readable Output

AWS EC2 Key Pairs

KeyFingerprint	KeyName	Region
fp1	Aqua	us-west-2
fp2	Test Keys	us-west-2

aws-ec2-describe-volumes

Describes the specified EBS volumes.

Base Command

aws-ec2-describe-volumes

Input

Context Output

Command Example

#### Context Example

```json
{
    "AWS": {
        "EC2": {
            "Volumes": [
                {
                    "Attachments": [
                        {
                            "AttachTime": "2019-04-29T13:05:57",
                            "DeleteOnTermination": true,
                            "Device": "/dev/dev_name",
                            "InstanceId": "i-1",
                            "State": "attached",
                            "VolumeId": "vol-1"
                        }
                    ],
                    "AvailabilityZone": "us-west-2b",
                    "CreateTime": "2019-04-29T13:05:57",
                    "Encrypted": false,
                    "Iops": 100,
                    "Region": "us-west-2",
                    "Size": 8,
                    "SnapshotId": "snap-1",
                    "State": "in-use",
                    "VolumeId": "vol-1",
                    "VolumeType": "gp2"
                },
                {
                    "Attachments": [
                        {
                            "AttachTime": "2020-08-19T11:22:07",
                            "DeleteOnTermination": true,
                            "Device": "/dev/dev_name",
                            "InstanceId": "i-1",
                            "State": "attached",
                            "VolumeId": "vol-1"
                        }
                    ],
                    "AvailabilityZone": "us-west-2b",
                    "CreateTime": "2020-08-19T11:22:07",
                    "Encrypted": false,
                    "Iops": 100,
                    "Size": 8,
                    "SnapshotId": "snap-1",
                    "State": "in-use",
                    "VolumeId": "vol-1",
                    "VolumeType": "gp2"
                }
            ]
        }
    }
}

Human Readable Output

AWS EC2 Volumes

AvailabilityZone	CreateTime	Encrypted	State	VolumeId	VolumeType
us-west-2b	2019-04-29T13:05:57Z	false	in-use	vol-1	gp2
us-west-2b	2020-08-19T11:22:07Z	false	in-use	vol-2	gp2

aws-ec2-describe-vpcs

Describes one or more of your VPCs.

Base Command

aws-ec2-describe-vpcs

Input

Context Output

Command Example

#### Context Example

```json
{
    "AWS": {
        "EC2": {
            "Vpcs": {
                "CidrBlock": "1.1.1.1/16",
                "CidrBlockAssociationSet": [
                    {
                        "AssociationId": "vpc",
                        "CidrBlock": "1.1.1.1/16",
                        "CidrBlockState": {
                            "State": "associated"
                        }
                    }
                ],
                "DhcpOptionsId": "dopt-1",
                "InstanceTenancy": "default",
                "IsDefault": true,
                "OwnerId": "id",
                "Region": "us-west-2",
                "State": "available",
                "VpcId": "vpc-1"
            }
        }
    }
}

Human Readable Output

AWS EC2 Vpcs

CidrBlock	DhcpOptionsId	InstanceTenancy	IsDefault	Region	State	VpcId
1.1.1.1/16	dopt-1	default	true	us-west-2	available	vpc-1

aws-ec2-describe-subnets

Describes one or more of your subnets.

Base Command

aws-ec2-describe-subnets

Input

Context Output

Command Example

#### Context Example

```json
{
    "AWS": {
        "EC2": {
            "Subnets": [
                {
                    "AssignIpv6AddressOnCreation": false,
                    "AvailabilityZone": "us-west-2d",
                    "AvailabilityZoneId": "zone_id",
                    "AvailableIpAddressCount": 4091,
                    "CidrBlock": "1.1.1.1/20",
                    "DefaultForAz": true,
                    "Ipv6CidrBlockAssociationSet": [],
                    "MapPublicIpOnLaunch": true,
                    "OwnerId": "id",
                    "Region": "us-west-2",
                    "State": "available",
                    "SubnetArn": "arn",
                    "SubnetId": "subnet-1",
                    "VpcId": "vpc-1"
                }
            ]
        }
    }
}

Human Readable Output

AWS EC2 Subnets

AvailabilityZone	AvailableIpAddressCount	CidrBlock	DefaultForAz	Region	State	SubnetId	VpcId
us-west-2d	4091	1.1.1.1/20	true	us-west-2	available	subnet-1	vpc-1
us-west-2c	4090	2.2.2.2/20	true	us-west-2	available	subnet-2	vpc-2

aws-ec2-describe-security-groups

Describes one or more of your security groups.

Base Command

aws-ec2-describe-security-groups

Input

Context Output

Command Example

#### Context Example

```json
{
    "AWS": {
        "EC2": {
            "SecurityGroups": [
                {
                    "Description": "AWS Ground Station receiver instance security group.",
                    "GroupId": "sg-1",
                    "GroupName": "gs-name",
                    "IpPermissions": [
                        {
                            "FromPort": 80,
                            "IpProtocol": "tcp",
                            "IpRanges": [
                                {
                                    "CidrIp": "0.0.0.0/0"
                                }
                            ],
                            "Ipv6Ranges": [
                                {
                                    "CidrIpv6": "::/0"
                                }
                            ],
                            "PrefixListIds": [],
                            "ToPort": 80,
                            "UserIdGroupPairs": []
                        },
                        {
                            "FromPort": 22,
                            "IpProtocol": "tcp",
                            "IpRanges": [
                                {
                                    "CidrIp": "10.0.0.0/16"
                                }
                            ],
                            "Ipv6Ranges": [],
                            "PrefixListIds": [],
                            "ToPort": 22,
                            "UserIdGroupPairs": []
                        },
                        {
                            "FromPort": 55888,
                            "IpProtocol": "udp",
                            "IpRanges": [],
                            "Ipv6Ranges": [],
                            "PrefixListIds": [],
                            "ToPort": 55888,
                            "UserIdGroupPairs": [
                                {
                                    "Description": "AWS Ground Station Downlink Stream",
                                    "GroupId": "sg-1",
                                    "UserId": "id"
                                }
                            ]
                        }
                    ],
                    "IpPermissionsEgress": [
                        {
                            "IpProtocol": "-1",
                            "IpRanges": [
                                {
                                    "CidrIp": "0.0.0.0/0"
                                }
                            ],
                            "Ipv6Ranges": [],
                            "PrefixListIds": [],
                            "UserIdGroupPairs": []
                        }
                    ],
                    "OwnerId": "id",
                    "Region": "us-west-2",
                    "Tags": [
                        {
                            "Key": "aws:key",
                            "Value": "InstanceSecurityGroup"
                        }
                    ],
                    "VpcId": "vpc-1"
                }
            ]
        }
    }
}

Human Readable Output

AWS EC2 SecurityGroups

Description	GroupId	GroupName	OwnerId	Region	VpcId	aws:cloudformation:logical-id	aws:cloudformation:stack-id	aws:cloudformation:stack-name
AWS Ground Station receiver instance security group.	sg-1	gs-name	id	us-west-2	vpc-1	InstanceSecurityGroup	arn	gs-aqua-receiver
Demisto-PlaybookTest	sg-2	Demisto-PlaybookTest	id	us-west-2	vpc-2

aws-ec2-allocate-address

Allocates an Elastic IP address.

Base Command

aws-ec2-allocate-address

Input

Context Output

aws-ec2-associate-address

Associates an Elastic IP address with an instance or a network interface.

Base Command

aws-ec2-associate-address

Input

Context Output

aws-ec2-create-snapshot

Creates a snapshot of an EBS volume and stores it in Amazon S3. You can use snapshots for backups, to make copies of EBS volumes, and to save data before shutting down an instance.

Base Command

aws-ec2-create-snapshot

Input

Context Output

aws-ec2-delete-snapshot

Deletes the specified snapshot.

Base Command

aws-ec2-delete-snapshot

Input

Context Output

There is no context output for this command.

aws-ec2-create-image

Creates an Amazon EBS-backed AMI from an Amazon EBS-backed instance that is either running or stopped.

Base Command

aws-ec2-create-image

Input

Context Output

aws-ec2-deregister-image

Deregisters the specified AMI.

Base Command

aws-ec2-deregister-image

Input

Context Output

There is no context output for this command.

aws-ec2-modify-volume

You can modify several parameters of an existing EBS volume, including volume size, volume type, and IOPS capacity.

Base Command

aws-ec2-modify-volume

Input

Context Output

aws-ec2-create-tags

Adds or overwrites one or more tags for the specified Amazon EC2 resource or resources.

Base Command

aws-ec2-create-tags

Input

Context Output

There is no context output for this command.

aws-ec2-disassociate-address

Disassociates an Elastic IP address from the instance or network interface its associated with.

Base Command

aws-ec2-disassociate-address

Input

Context Output

There is no context output for this command.

aws-ec2-release-address

Releases the specified Elastic IP address.

Base Command

aws-ec2-release-address

Input

Context Output

There is no context output for this command.

aws-ec2-start-instances

Starts an Amazon EBS-backed instance that you have previously stopped.

Base Command

aws-ec2-start-instances

Input

Context Output

There is no context output for this command.

aws-ec2-stop-instances

Stops an Amazon EBS-backed instance.

Base Command

aws-ec2-stop-instances

Input

Context Output

There is no context output for this command.

aws-ec2-terminate-instances

Shuts down one or more instances. This operation is idempotent; if you terminate an instance more than once, each call succeeds.

Base Command

aws-ec2-terminate-instances

Input

Context Output

There is no context output for this command.

aws-ec2-create-volume

Creates an EBS volume that can be attached to an instance in the same Availability Zone.

Base Command

aws-ec2-create-volume

Input

Context Output

aws-ec2-attach-volume

Attaches an EBS volume to a running or stopped instance and exposes it to the instance with the specified device name.

Base Command

aws-ec2-attach-volume

Input

Context Output

aws-ec2-detach-volume

Detaches an EBS volume from an instance.

Base Command

aws-ec2-detach-volume

Input

Context Output

aws-ec2-delete-volume

Deletes the specified EBS volume. The volume must be in the available state (not attached to an instance).

Base Command

aws-ec2-delete-volume

Input

Context Output

There is no context output for this command.

aws-ec2-run-instances

Launches the specified number of instances using an AMI for which you have permissions. You can create a launch template , which is a resource that contains the parameters to launch an instance. When you launch an instance using RunInstances , you can specify the launch template instead of specifying the launch parameters. An instance is ready for you to use when its in the running state. You can check the state of your instance using DescribeInstances.

Base Command

aws-ec2-run-instances

Input

Context Output

aws-ec2-waiter-instance-running

A waiter function that runs every 15 seconds until a successful state is reached.

Base Command

aws-ec2-waiter-instance-running

Input

Context Output

There is no context output for this command.

aws-ec2-waiter-instance-status-ok

A waiter function that runs every 15 seconds until a successful state is reached.

Base Command

aws-ec2-waiter-instance-status-ok

Input

Context Output

There is no context output for this command.

aws-ec2-waiter-instance-stopped

A waiter function that runs every 15 seconds until a successful state is reached.

Base Command

aws-ec2-waiter-instance-stopped

Input

Context Output

There is no context output for this command.

aws-ec2-waiter-instance-terminated

A waiter function that runs every 15 seconds until a successful state is reached.

Base Command

aws-ec2-waiter-instance-terminated

Input

Context Output

There is no context output for this command.

aws-ec2-waiter-image-available

A waiter function that waits until image is avilable.

Base Command

aws-ec2-waiter-image-available

Input

Context Output

There is no context output for this command.

aws-ec2-waiter-snapshot_completed

A waiter function that waits until the snapshot is complate.

Base Command

aws-ec2-waiter-snapshot_completed

Input

Context Output

There is no context output for this command.

aws-ec2-get-latest-ami

Get The latest AMI.

Base Command

aws-ec2-get-latest-ami

Input

Context Output

aws-ec2-create-security-group

Creates a security group.

Base Command

aws-ec2-create-security-group

Input

Context Output

aws-ec2-delete-security-group

Deletes a security group.

Base Command

aws-ec2-delete-security-group

Input

Context Output

There is no context output for this command.

aws-ec2-authorize-security-group-ingress-rule

Adds ingress rule to a security group.

Base Command

aws-ec2-authorize-security-group-ingress-rule

Input

Context Output

There is no context output for this command.

aws-ec2-authorize-security-group-egress-rule

Adds egress rule to a security group.

Base Command

aws-ec2-authorize-security-group-egress-rule

Input

Context Output

There is no context output for this command.

aws-ec2-revoke-security-group-ingress-rule

Removes egress rule from a security group. To remove a rule, the values that you specify (for example, ports) must match the existing rule’s values exactly.

Base Command

aws-ec2-revoke-security-group-ingress-rule

Input

Context Output

There is no context output for this command.

aws-ec2-revoke-security-group-egress-rule

(VPC only) Removes the specified egress rules from a security group for EC2-VPC. This action does not apply to security groups for use in EC2-Classic. To remove a rule, the values that you specify (for example, ports) must match the existing rule’s values exactly.

Base Command

aws-ec2-revoke-security-group-egress-rule

Input

Context Output

There is no context output for this command.

aws-ec2-copy-image

Initiates the copy of an AMI from the specified source region to the current region.

Base Command

aws-ec2-copy-image

Input

Context Output

aws-ec2-copy-snapshot

Copies a point-in-time snapshot of an EBS volume and stores it in Amazon S3. You can copy the snapshot within the same region or from one region to another.

Base Command

aws-ec2-copy-snapshot

Input

Context Output

aws-ec2-describe-reserved-instances

Describes one or more of the Reserved Instances that you purchased.

Base Command

aws-ec2-describe-reserved-instances

Input

Context Output

aws-ec2-monitor-instances

Enables detailed monitoring for a running instance.

Base Command

aws-ec2-monitor-instances

Input

Context Output

aws-ec2-unmonitor-instances

Disables detailed monitoring for a running instance.

Base Command

aws-ec2-unmonitor-instances

Input

Context Output

aws-ec2-reboot-instances

Requests a reboot of one or more instances. This operation is asynchronous; it only queues a request to reboot the specified instances. The operation succeeds if the instances are valid and belong to you. Requests to reboot terminated instances are ignored. If an instance does not cleanly shut down within four minutes, Amazon EC2 performs a hard reboot.

Base Command

aws-ec2-reboot-instances

Input

Context Output

There is no context output for this command.

aws-ec2-get-password-data

Retrieves the encrypted administrator password for a running Windows instance.

Base Command

aws-ec2-get-password-data

Input

Context Output

aws-ec2-modify-network-interface-attribute

Modifies the specified network interface attribute. You can specify only one attribute at a time.

Base Command

aws-ec2-modify-network-interface-attribute

Input

Context Output

There is no context output for this command.

aws-ec2-modify-instance-attribute

Modifies the specified attribute of the specified instance. You can specify only one attribute at a time. Using this action to change the security groups associated with an elastic network interface (ENI) attached to an instance in a VPC can result in an error if the instance has more than one ENI. To change the security groups associated with an ENI attached to an instance that has multiple ENIs, we recommend that you use the ModifyNetworkInterfaceAttribute action.

Base Command

aws-ec2-modify-instance-attribute

Input

Context Output

There is no context output for this command.

aws-ec2-create-network-acl

Creates a network ACL in a VPC. Network ACLs provide an optional layer of security (in addition to security groups) for the instances in your VPC.

Base Command

aws-ec2-create-network-acl

Input

Context Output

aws-ec2-create-network-acl-entry

Creates an entry (a rule) in a network ACL with the specified rule number.

Base Command

aws-ec2-create-network-acl-entry

Input

Context Output

There is no context output for this command.

aws-ec2-create-fleet

Launches an EC2 Fleet.

Base Command

aws-ec2-create-fleet

Input

Context Output

aws-ec2-delete-fleet

Deletes the specified EC2 Fleet.

Base Command

aws-ec2-delete-fleet

Input

Context Output

aws-ec2-describe-fleets

Describes one or more of your EC2 Fleets.

Base Command

aws-ec2-describe-fleets

Input

Context Output

aws-ec2-describe-fleet-instances

Describes the running instances for the specified EC2 Fleet.

Base Command

aws-ec2-describe-fleet-instances

Input

Context Output

aws-ec2-modify-fleet

Modifies the specified EC2 Fleet.

Base Command

aws-ec2-modify-fleet

Input

Context Output

There is no context output for this command.

aws-ec2-create-launch-template

Creates a launch template. A launch template contains the parameters to launch an instance.

Base Command

aws-ec2-create-launch-template

Input

Context Output

aws-ec2-delete-launch-template

Deletes a launch template. Deleting a launch template deletes all of its versions.

Base Command

aws-ec2-delete-launch-template

Input

Context Output

aws-ec2-modify-image-attribute

Modifies the specified attribute of the specified AMI.

Base Command

aws-ec2-modify-image-attribute

Input

Context Output

There is no context output for this command.

aws-ec2-delete-subnet

Deletes the specified subnet. You must terminate all running instances in the subnet before you can delete the subnet.

Base Command

aws-ec2-delete-subnet

Input

Context Output

There is no context output for this command.

aws-ec2-delete-vpc

Deletes the specified VPC. You must detach or delete all gateways and resources that are associated with the VPC before you can delete it. For example, you must terminate all instances running in the VPC, delete all security groups associated with the VPC (except the default one), delete all route tables associated with the VPC (except the default one), and so on.

Base Command

aws-ec2-delete-vpc

Input

Context Output

There is no context output for this command.

aws-ec2-delete-internet-gateway

Deletes the specified internet gateway. You must detach the internet gateway from the VPC before you can delete it.

Base Command

aws-ec2-delete-internet-gateway

Input

Context Output

There is no context output for this command.

aws-ec2-describe-internet-gateway

Describes one or more of your internet gateways.

Base Command

aws-ec2-describe-internet-gateway

Input

Context Output

aws-ec2-detach-internet-gateway

Detaches an internet gateway from a VPC, disabling connectivity between the internet and the VPC. The VPC must not contain any running instances with Elastic IP addresses or public IPv4 addresses.

Base Command

aws-ec2-detach-internet-gateway

Input

Context Output

There is no context output for this command.

aws-ec2-create-traffic-mirror-session

Creates a Traffic Mirror session.

Base Command

aws-ec2-create-traffic-mirror-session

Input

Context Output

aws-ec2-revoke-security-group-egress-rule

Removes egress rule from a security group. To remove a rule, the values that you specify (for example, ports) must match the existing rule’s values exactly.

Base Command

aws-ec2-revoke-security-group-egress-rule

Input

Context Output

There is no context output for this command.

aws-ec2-allocate-hosts

Allocates a Dedicated Host to your account.

Base Command

aws-ec2-allocate-hosts

Input

Context Output

Command Example

!aws-ec2-allocate-hosts availability_zone="us-east-1b" quantity=1 instance_type="m5.large"

Human Readable Output

AWS EC2 Dedicated Host ID

HostId
h-00548908djdsgfs

aws-ec2-release-hosts

Release on demand dedicated host.

Base Command

aws-ec2-release-hosts

Input

Context Output

There is no context output for this command.

Command Example

!aws-ec2-release-hosts host_id="h-00548908djdsgfs"

Human Readable Output

The host was successfully released.

aws-ec2-modify-snapshot-permission

Adds or removes permission settings for the specified snapshot.

Base Command

aws-ec2-modify-snapshot-permission

Input

Context Output

There is no context output for this command.

Command example

!aws-ec2-modify-snapshot-permission operationType=remove snapshotId=snap-04b2d21f20d2388f2 userIds=123456789012

Human Readable Output

Snapshot snap-04b2d21f20d2388f2 permissions was successfully updated.

aws-ec2-describe-ipam-resource-discoveries

Describes IPAM resource discoveries. A resource discovery is an IPAM component that enables IPAM to manage and monitor resources that belong to the owning account.

Base Command

aws-ec2-describe-ipam-resource-discoveries

Input

Context Output

Command example

#### Context Example

```json
{
    "AWS": {
        "EC2": {
            "IpamResourceDiscoveries": {
                "IpamResourceDiscoveryArn": "arn:aws:ec2::222222222222:ipam-resource-discovery/ipam-res-disco-11111111111111111",
                "IpamResourceDiscoveryId": "ipam-res-disco-11111111111111111",
                "IpamResourceDiscoveryRegion": "us-east-1",
                "IsDefault": true,
                "OperatingRegions": [
                    {
                        "RegionName": "ap-south-1"
                    },
                    {
                        "RegionName": "eu-north-1"
                    },
                    {
                        "RegionName": "eu-west-3"
                    },
                    {
                        "RegionName": "eu-west-2"
                    },
                    {
                        "RegionName": "eu-west-1"
                    },
                    {
                        "RegionName": "ap-northeast-3"
                    },
                    {
                        "RegionName": "ap-northeast-2"
                    },
                    {
                        "RegionName": "ap-northeast-1"
                    },
                    {
                        "RegionName": "ca-central-1"
                    },
                    {
                        "RegionName": "sa-east-1"
                    },
                    {
                        "RegionName": "ap-southeast-1"
                    },
                    {
                        "RegionName": "ap-southeast-2"
                    },
                    {
                        "RegionName": "eu-central-1"
                    },
                    {
                        "RegionName": "us-east-1"
                    },
                    {
                        "RegionName": "us-east-2"
                    },
                    {
                        "RegionName": "us-west-1"
                    },
                    {
                        "RegionName": "us-west-2"
                    }
                ],
                "OwnerId": "222222222222",
                "State": "create-complete",
                "Tags": []
            }
        }
    }
}

Human Readable Output

Ipam Resource Discoveries

IpamResourceDiscoveryArn	IpamResourceDiscoveryId	IpamResourceDiscoveryRegion	IsDefault	OperatingRegions	OwnerId	State	Tags
arn:aws:ec2::222222222222:ipam-resource-discovery/ipam-res-disco-11111111111111111	ipam-res-disco-11111111111111111	us-east-1	true	{‘RegionName’: ‘ap-south-1’}, {‘RegionName’: ‘eu-north-1’}, {‘RegionName’: ‘eu-west-3’}, {‘RegionName’: ‘eu-west-2’}, {‘RegionName’: ‘eu-west-1’}, {‘RegionName’: ‘ap-northeast-3’}, {‘RegionName’: ‘ap-northeast-2’}, {‘RegionName’: ‘ap-northeast-1’}, {‘RegionName’: ‘ca-central-1’}, {‘RegionName’: ‘sa-east-1’}, {‘RegionName’: ‘ap-southeast-1’}, {‘RegionName’: ‘ap-southeast-2’}, {‘RegionName’: ‘eu-central-1’}, {‘RegionName’: ‘us-east-1’}, {‘RegionName’: ‘us-east-2’}, {‘RegionName’: ‘us-west-1’}, {‘RegionName’: ‘us-west-2’}	222222222222	create-complete

aws-ec2-describe-ipam-resource-discovery-associations

Describes resource discovery association with an Amazon VPC IPAM. An associated resource discovery is a resource discovery that has been associated with an IPAM.

Base Command

aws-ec2-describe-ipam-resource-discovery-associations

Input

Context Output

Command example

#### Context Example

```json
{
    "AWS": {
        "EC2": {
            "IpamResourceDiscoveryAssociations": {
                "IpamArn": "arn:aws:ec2::222222222222:ipam/ipam-11111111111111111",
                "IpamId": "ipam-11111111111111111",
                "IpamRegion": "us-east-1",
                "IpamResourceDiscoveryAssociationArn": "arn:aws:ec2::222222222222:ipam-resource-discovery-association/ipam-res-disco-assoc-11111111111111111",
                "IpamResourceDiscoveryAssociationId": "ipam-res-disco-assoc-11111111111111111",
                "IpamResourceDiscoveryId": "ipam-res-disco-11111111111111111",
                "IsDefault": true,
                "OwnerId": "222222222222",
                "ResourceDiscoveryStatus": "active",
                "State": "associate-complete",
                "Tags": []
            }
        }
    }
}

Human Readable Output

Ipam Resource Discovery Associations

IpamArn	IpamId	IpamRegion	IpamResourceDiscoveryAssociationArn	IpamResourceDiscoveryAssociationId	IpamResourceDiscoveryId	IsDefault	OwnerId	ResourceDiscoveryStatus	State	Tags
arn:aws:ec2::222222222222:ipam/ipam-11111111111111111	ipam-11111111111111111	us-east-1	arn:aws:ec2::222222222222:ipam-resource-discovery-association/ipam-res-disco-assoc-11111111111111111	ipam-res-disco-assoc-11111111111111111	ipam-res-disco-11111111111111111	true	222222222222	active	associate-complete

aws-ec2-get-ipam-discovered-public-addresses

Gets the public IP addresses that have been discovered by IPAM.

Base Command

aws-ec2-get-ipam-discovered-public-addresses

Input

Context Output

Command example

!aws-ec2-get-ipam-discovered-public-addresses IpamResourceDiscoveryId=ipam-res-disco-11111111111111111 AddressRegion=us-east-1 Filters=Name=address,Values=1.1.1.1

Context Example

{
    "AWS": {
        "EC2": {
            "IpamDiscoveredPublicAddresses": {
                "Address": "1.1.1.1",
                "AddressAllocationId": "eipalloc-11111111111111111",
                "AddressOwnerId": "222222222222",
                "AddressRegion": "us-east-1",
                "AddressType": "amazon-owned-eip",
                "AssociationStatus": "associated",
                "InstanceId": "i-11111111111111111",
                "IpamResourceDiscoveryId": "ipam-res-disco-11111111111111111",
                "NetworkBorderGroup": "us-east-1",
                "NetworkInterfaceDescription": "",
                "NetworkInterfaceId": "eni-11111111111111111",
                "PublicIpv4PoolId": "amazon",
                "SampleTime": "2023-11-26T02:00:45",
                "SecurityGroups": [
                    {
                        "GroupId": "sg-11111111111111111",
                        "GroupName": "example_sg"
                    }
                ],
                "SubnetId": "subnet-11111111111111111",
                "Tags": {
                    "EipTags": []
                },
                "VpcId": "vpc-11111111111111111"
            }
        }
    }
}