Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Encrypt EBS, AMI update to Amazon Linux 2 2.0.20230822.0 #798

Merged
merged 2 commits into from
Sep 1, 2023

Conversation

matafc
Copy link
Contributor

@matafc matafc commented Sep 1, 2023

Changes

  • Changes the setting to encrypt EBS volumes
  • Also including the latest AMI update so our instances will remain compliant. Details at the section below

This has been tested on a local instance of Barcelona with the sre-sandbox5 AWS account.

AMI Update

This PR will also update the AMIs of the container instances as described in this guide:

Release notes

Amazon ECS-optimized AMIs - Amazon Elastic Container Service

ECS AMI SSM path: https://ap-northeast-1.console.aws.amazon.com/systems-manager/parameters/aws/service/ecs/optimized-ami/amazon-linux-2/recommended/image_id/description?region=ap-northeast-1
https://ap-northeast-1.console.aws.amazon.com/systems-manager/parameters/aws/service/ecs/optimized-ami/amazon-linux-2/recommended/description?region=ap-northeast-1

And it also updates the AMI for the bastion image.

Bastion AMI SSM path: https://ap-northeast-1.console.aws.amazon.com/systems-manager/parameters/aws/service/ami-amazon-linux-latest/amzn2-ami-hvm-x86_64-gp2/description?region=ap-northeast-1

@degikko
Copy link

degikko commented Sep 1, 2023

@barom1991 can you help us review this PR, please?

@matafc matafc removed the request for review from barom1991 September 1, 2023 03:52
@matafc
Copy link
Contributor Author

matafc commented Sep 1, 2023

Sorry @barom1991, meant to assign someone from sre.

@degikko
Copy link

degikko commented Sep 1, 2023

@davidsiaw can you help us review this PR, please?

Copy link
Contributor

@davidsiaw davidsiaw left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@davidsiaw davidsiaw merged commit 742bd90 into master Sep 1, 2023
6 checks passed
@davidsiaw davidsiaw deleted the ebs-encrypt branch September 1, 2023 03:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants