Identify any Amazon EC2 instances that appear to be overutilized and upgrade (resize) them in order to help your EC2-hosted applications to handle better the workload and improve the response time. By default, an Amazon EC2 instance is considered "overutilized" when matches the following criteria:
- The average CPU utilization has been more than 90% for the last 7 days.
- The average memory utilization has been more than 90% for the last 7 days. By default, Amazon CloudWatch can't record an EC2 instance memory utilization because the necessary metric cannot be implemented at the hypervisor level, therefore to be able to report the memory utilization using CloudWatch you need to install an agent (PERL script) on the instance that you want to monitor and create a custom metric (we'll name it EC2MemoryUtilization) on the CloudWatch console. The instructions required for installing the monitoring agent, based on the Operating System used by instance, are available at this URL.
This rule resolution is part of the Conformity Security & Compliance tool for AWS.
efficiency
Overutilized Amazon EC2 instances could indicate that the applications running on these machines do not have enough hardware resources to perform optimally. Upgrading (upsizing) overutilized Amazon EC2 instances to meet your load needs will improve directly the health and success of your applications, resulting in a more stable environment and a faster response time.
Audit
To identify any overutilized Amazon EC2 instances that could benefit from a more efficient hardware configuration, perform the following operations:
Remediation / Resolution
To upgrade (resize) the overused Amazon EC2 instances provisioned within your AWS cloud account by adding more hardware resources to the specified EC2 instances, perform the following operations:
(!) IMPORTANT: The following procedure assumes that the Amazon EC2 instances selected for reconfiguration (upgrade) are NOT currently used in production or for critical operations.References
- AWS Documentation
- Trusted Advisor Best Practices (Checks)
- Monitoring Memory and Disk Metrics for Amazon EC2 Linux Instances
- Amazon EC2 Metrics and Dimensions
- Stop and Start Your Instance
- Amazon EC2 Instance Types
- Auto Scaling Groups
- Scaling the Size of Your Auto Scaling Group
- Manual Scaling
- AWS Command Line Interface (CLI) Documentation
- describe-instances
- stop-instances
- modify-instance-attribute
- start-instances
- cloudwatch
- get-metric-statistics
Unlock the Remediation Steps
Free 30-day Trial
Automatically audit your configurations with Conformity
and gain access to our cloud security platform.
You are auditing:
Overutilized AWS EC2 Instances
Risk Level: High