Skip to content
mpolcik edited this page Jul 26, 2018 · 2 revisions

EC2

How to use it

$ go run main.go --region us-east-1 --service ec2

Example output

+---------------------+--------------------------------+-------------+----------+
|         EC2         |            VOLUMES             |  SECURITY   |          |
|                     |                                |             | EC2 TAGS |
|                     |     (NONE) - NOT ENCRYPTED     |   GROUPS    |          |
|                     |                                |             |          |
|                     |    (DKMS) - ENCRYPTED WITH     |             |          |
|                     |         DEFAULT KMSKEY         |             |          |
+---------------------+--------------------------------+-------------+----------+
| i-0fa455c90ace32283 | vol-0a8143f0b2e78424d[DKMS]    | sg-aaaaaaa  | App:some |
|                     | vol-0c4bacc1704c98f56[NONE]    |             | Key:Val  |
|                     |                                |             |          |
|                     |                                |             |          |
+---------------------+--------------------------------+-------------+----------+

How to read it

  1. First column EC2 contains instance ID.
  2. Second column Volumes contains IDs of attached volumes(virtual disks) to given EC2. Suffixes meaning:
    • [NONE] - Volume not encrypted.
    • [DKMS] - Volume encrypted using AWS Default KMS Key.
  3. Third column Security Groups contains IDs of security groups that have too open permissions. e.g. CIDR block is equal to 0.0.0.0/0(open to the whole world).
  4. Fourth column EC2 TAGS contains tags of a given EC2 instance to help you identify purpose of this instance.

Docs

  1. https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSEncryption.html

Tyr

Home

Services

EC2

S3

KMSKeys

TODO

Clone this wiki locally