An EC2 instance is nothing but a virtual private server in Amazon Web Services terminology. It stands for Elastic Compute Cloud server. It is a web service where an AWS subscriber can request and provision a compute server in AWS cloud.
An on-demand EC2 instance is an offering from AWS where the subscriber/user can rent the virtual server per hour and use it to deploy his/her own applications.
The instance will be charged per hour with different rates based on the type of the instance chosen. AWS provides multiple instance types for the respective business needs of the user.
Thus, you can rent an instance based on your own CPU and memory requirements and use it if you want. You can terminate the instance when it’s no more used and save on costs. This is the most striking advantage of an on-demand instance – you can drastically save on your CAPEX.
Login and access to AWS services
Choose AMI
Choose Instance Types
Configure Instance
Add Storage
Tag Instance
Configuring Security Groups
Review Instances
Creating an EIP and connecting to your instance
Let us see in detail how to launch an on-demand EC2 instance in AWS Cloud.
Login and access to AWS services
Login to your AWS account and go to the AWS Services tab at the top left corner.
Here, you will see all of the AWS Services categorized as per their area viz. Compute, Storage, Database, etc. For creating an EC2 instance , we have to choose Computeà EC2 as in the next step.
Open all the services and click on EC2 under Compute services. This will launch the dashboard of EC2.
Here is the EC2 dashboard. Here you will get all the information in gist about the AWS EC2 resources running.
Here we are selecting N. Virginia. AWS provides 10 Regions all over the globe.
Once your desired Region is selected, come back to the EC2 Dashboard.
Click on ‘Launch Instance ‘ button in the section of Create Instance (as shown below).
Instance creation wizard page will open as soon as you click ‘Launch Instance ‘.
You will be asked to choose an AMI of your choice. (An AMI is an Amazon Machine Image. It is a template basically of an Operating System platform which you can use as a base to create your instance ). Once you launch an EC2 instance from your preferred AMI, the instance will automatically be booted with the desired OS. (We will see more about AMIs in the coming part of the tutorial).
Here we are choosing the default Amazon Linux (64 bit) AMI.
We will choose t2.micro instance type, which is a 1vCPU and 1GB memory server offered by AWS.
Click on “Configure Instance Details” for further configurations
In the next step of the wizard, enter details like no. of instance s you want to launch at a time.
Here we are launching one instance.
Configure Instance
Step 1) No. of instance s- you can provision up to 20 instance s at a time. Here we are launching one instance.
Step 2) Under Purchasing Options, keep the option of ‘Request Spot Instance s’ unchecked as of now. (This is done when we wish to launch Spot instance s instead of on-demand ones. We will come back to Spot instance s in the later part of the tutorial).
Step 3) Next, we have to configure some basic networking details for our EC2 server.
You have to decide here, in which VPC (Virtual Private Cloud) you want to launch your instance and under which subnets inside your VPC. It is better to determine and plan this prior to launching the instance. Your AWS architecture set-up should include IP ranges for your subnets etc. pre-planned for better management. (We will see how to create a new VPC in Networking section of the tutorial.
Subnetting should also be pre-planned. E.g.: If it’s a web server you should place it in the public subnet and if it’s a DB server, you should place it in a private subnet all inside your VPC.
Below,
Network section will give a list of VPCs available in our platform.
Select an already existing VPC
You can also create a new VPC
Here I have selected an already existing VPC where I want to launch my instance .
Step 4) In this step,
A VPC consists of subnets, which are IP ranges that are separated for restricting access.
Below,
Under Subnets, you can choose the subnet where you want to place your instance .
I have chosen an already existing public subnet.
You can also create a new subnet in this step.
Once your instance is launched in a public subnet, AWS will assign a dynamic public IP to it from their pool of IPs.
Step 5) In this step,
You can choose if you want AWS to assign it an IP automatically, or you want to do it manually later. You can enable/ disable ‘Auto assign Public IP’ feature here likewise.
Here we are going to assign this instance a static IP called as EIP (Elastic IP) later. So we keep this feature disabled as of now.
Step 6) In this step,
In the following step, keep the option of IAM role ‘None’ as of now. We will visit the topic of IAM role in detail in IAM services.
Step 7) In this step, you have to do the following things
Shutdown Behavior – when you accidentally shut down your instance, you surely don’t want it to be deleted but stopped.
Here we are defining my shutdown behavior as Stop.
Step 8) In this step,
In case, you have accidentally terminated your instance, AWS has a layer of security mechanism. It will not delete your instance if you have enabled accidental termination protection.
Here we are checking the option for further protecting our instance from accidental termination.
Step 9) In this step,
Under Monitoring- you can enable Detailed Monitoring if your instance is a business critical instance. Here we have kept the option unchecked. Also, AWS will always provide Basic monitoring on your instance free of cost. We will visit the topic of monitoring in AWS Cloud Watch part of the tutorial.
Under Tenancy- select the option if shared tenancy. If your application is a highly secure application, then you should go for dedicated capacity. AWS provides both options.
Step 10) In this step,
Click on ‘Add Storage’ to add data volumes to your instance in the next step.
Add Storage
Step 1) In this step we do the following things,
In the Add Storage step, you’ll see that the instance has been automatically provisioned a General Purpose SSD root volume of 8GB. ( Maximum volume size we can give to a General Purpose volume is 16GB)
You can change your volume size, add new volumes, change the volume type, etc.
AWS provides 3 types of EBS volumes- Magnetic, General Purpose SSD, Provisioned IOPs. You can choose a volume type based on your application’s IOPs needs.
Step 1) In this step
you can tag your instance with a key-value pair. This gives visibility to the AWS account administrator when there is lot number of instance s.
The instance s should be tagged based on their department, environment like Dev/SIT/Prod. Etc. this gives a clear view of the costing on the instance s under one common tag.
Here we have tagged the instance as a Dev_Web server 01
Go to configure Security Groups later
Configuring Security Groups
Step 1) In this next step of configuring Security Groups, you can restrict traffic on your instance ports. Moreover, this is an added firewall mechanism provided by AWS apart from your instance ‘s OS firewall.
You can define open ports and IPs.
Since our server is a webserver=, we will do the following things
Creating a new Security Group
Naming our SG for easier reference
Defining protocols which we want to be enabled on my instance
Assigning IPs which are allowed to access our instance on the said protocols
Once, the firewall rules are set- Review and launch
Review Instances
Step 1) In this step, we will review all our choices and parameters and go ahead to launch our instance.
Step 2) In the next step you will be asked to create a key pair to log in to you an instance A key pair is a set of public-private keys.
AWS stores the private key in the instance, and you are asked to download the public key. Make sure you download the key and keep it safe and secured; if it is lost you cannot download it again.
Create a new key pair
Give a name to your key
Download and save it in your secured folder
When you download your key, you can open and have a look at your RSA private key.
Step 3) Once you are done downloading and saving your key, launch your instance.
You can see the launch status meanwhile.
You can also see the launch log.
Click on the ‘ Instances’ option on the left pane where you can see the status of the instance as ‘Pending’ for a brief while.
Once your instance is up and running, you can see its status as ‘Running’ now. Further, note that the instance has received a Private IP from the pool of AWS.
Creating an EIP and connecting to your instance
An EIP is a static public IP provided by AWS. It stands for Elastic IP. Normally when you create an instance, it will receive a public IP from the AWS‘s pool automatically. If you stop/reboot your instance, this public IP will change- it’dynamic. In order for your application to have a static IP from where you can connect via public networks, you can use an EIP.
On the left pane of EC2 Dashboard, you can go to ‘Elastic IPs’ as shown below.
Allocate a new Elastic IP Address.
Step 3)
Allocate this IP to be used in a VPC scope.
Your request will succeed if you don’t have 5 or more than 5 EIPs already in your account.
Step 4)
Now assign this IP to your instance.
Select the said IP
Click on Actions -> Associate Address
Step 5)
In the next page,
Search for your instance and
Associate the IP to it.
Step 6)
Come back to your instance s screen, you’ll see that your instance has received your EIP.
Step 7)
Now open putty from your programs list and add your same EIP in there as below.
Step 8) In this step,
Add your private key in putty for a secure connection
Go to Auth
Add your private key in .ppk (putty private key) format
Once done, click on “Open” button
Once you connect, you will successfully see the Linux prompt.
Please note that the machine you are connecting from should be enabled on the instance Security Group for SSH (like in the steps above).
Once you become familiar with the above steps for launching the instance, it becomes a matter of 2 minutes to launch the same!
You can now use your on-demand EC2 server for your applications.
Thus, we saw in detail how to create an on-demand EC2 instance in this tutorial. Because it is an on-demand server, you can keep it running when in use and ‘Stop’ it when it’s unused to save on your costs.
Also, you can provision a Linux or Windows EC2 instance or from any of the available AMIs in AWS Marketplace based on your choice of OS platform.
If your application is in production and you have to use it for years to come, you should consider provisioning a reserved instance to drastically save on your CAPEX.
For official guidelines and detailed information on EC2 instances, refer to the AWS Documentation on EC2 Instances.
To learn more about securing your EC2 instances, visit AWS EC2 Security Best Practices.
