skills.rest
richardnroman
richardnromanCOMMUNITY
Explore all skills by this author →
GitHub

launching-ec2-instance-with-best-practices

Launches EC2 instances with hardened security groups, least-privilege IAM roles, and encrypted gp3 storage.

Updated Jul 21, 2026
Search Tags:#aws#cloud infrastructure#iam#ec2#provisioning#security groups#instance launch
One-click install
npx skills add https://github.com/richardnroman/Synthetic-Data-Exchange-Licensing-Platform --skill launching-ec2-instance-with-best-practices-richardnroman
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: launching-ec2-instance-with-best-practices
Source: https://github.com/richardnroman/Synthetic-Data-Exchange-Licensing-Platform/tree/main/.agents/skills/launching-ec2-instance-with-best-practices
Command: npx skills add https://github.com/richardnroman/Synthetic-Data-Exchange-Licensing-Platform --skill launching-ec2-instance-with-best-practices-richardnroman

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve? Manually launching EC2 instances often leads to insecure defaults like open SSH ports, missing IAM roles, unencrypted volumes, and untracked costs. This Skill guides the AI through a structured, best-practice launch procedure that enforces security hardening and cost-efficient sizing every time. ## Core Features & Use Cases - Guided Launch Procedure: A step-by-step SOP covering AMI selection, instance type recommendation, network validation, IAM role creation, security group hardening, storage configuration, tagging, and post-launch verification. - Intelligent Defaults: Recommends burstable t3/t3a/t4g instance types, Amazon Linux 2023 AMIs, gp3 encrypted volumes, and environment-appropriate settings based on workload type (web-server, database, bastion-host, etc.). - Security by Default: Enforces least-privilege IAM policies, IMDSv2, minimal security group ingress, and SSM Session Manager access when SSH is not required. - Use Case: Ask the agent to launch a production web server in eu-west-1, and it will validate the VPC, select a hardened AMI, create a least-privilege role, configure encrypted storage, and present a full cost and security summary before launching. ## Quick Start Ask the agent to launch a new EC2 instance for your workload, providing the workload type and AWS region, and let it walk you through the best-practice configuration. ## Quick Start Tell the agent to launch an EC2 instance for a web-server workload in us-east-1 and follow its guided configuration prompts.

Frequently Asked Questions about launching-ec2-instance-with-best-practices

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I launch an EC2 instance with AWS best practices?▼

Provide the workload type and AWS region, and the procedure guides you through AMI selection, instance sizing, network validation, IAM role creation, security group hardening, and encrypted storage. It presents a full configuration summary for confirmation before running aws ec2 run-instances.

What instance type should I choose for my EC2 workload?▼

The procedure recommends burstable t3 or t3a types by default: t3.micro for development and testing, t3.small for web servers, and t3.medium for application servers or databases. ARM-based t4g instances are suggested for better price-performance when the AMI supports arm64.

Can I launch an EC2 instance without SSH access?▼

Yes. If no SSH source CIDR is provided and the workload is not a bastion host, the procedure skips key pair creation and SSH ingress rules entirely, instead attaching the AmazonSSMManagedInstanceCore policy so you connect via AWS Systems Manager Session Manager.

How does the skill secure EC2 security groups?▼

It applies least-privilege ingress rules based on workload type, opens only required ports, restricts SSH to specific CIDR blocks, and never exposes database ports to 0.0.0.0/0. It also warns about common misconfigurations like public SSH or RDP access.

Why does my EC2 instance terminate immediately after launch?▼

Immediate termination usually indicates an EBS volume size too small for the AMI or an AMI incompatible with the selected instance type architecture. Check the console output with aws ec2 get-console-output and verify the AMI architecture matches the instance type.

What are the limitations of t3 burstable instances?▼

T3 instances provide baseline CPU performance with burst credits that deplete under sustained load. For consistent production workloads, the procedure recommends enabling unlimited mode or monitoring credit balance to avoid performance throttling.

Related Skills

Explore More Software Engineering Skills→
X-School-AcademyX-School-Academy
19

setup-aws-ec2

Provision an AWS EC2 environment with VPC, subnet, and SSH security group.

Official
Advanced
engineers-hub-ltd-in-house-projectengineers-hub-ltd-in-house-project

ecs-fargate

Design and deploy containerized applications on AWS ECS with Fargate.

Official
Advanced
infraspecdevinfraspecdev
3

terraform-security-audit

Audit Terraform AWS infrastructure for security vulnerabilities and policy flaws.

Official
Advanced
tanaertanaer

infra-as-code

Automate cloud infrastructure provisioning with Terraform, CloudFormation, and Pulumi.

Community
Advanced