EC2 Image Builder Specialized2019年〜
A service that automates the creation, testing, and distribution of custom AMIs
What It Does
EC2 Image Builder is a service that automates the creation, testing, and distribution of custom Amazon Machine Images (AMIs) and container images. You define pipelines that include steps like OS patching, software installation, and security hardening, and they run automatically on a schedule.
Use Cases
Used for regularly creating standard AMIs with the latest security patches, distributing pre-configured development environment images to dev teams, and managing hardened images that meet compliance requirements.
Everyday Analogy
Think of it like a factory assembly line. Parts (OS + software) are assembled following a set procedure (recipe), undergo quality inspection (testing), and the approved products (AMIs) are shipped (distributed).
What Is Image Builder?
EC2 Image Builder is a service that automates the AMI creation process. It eliminates the manual work of launching an EC2 instance, installing software, and creating an AMI. You build pipelines by combining recipes, infrastructure configurations, distribution settings, and test components.
Recipes and Components
A recipe defines the composition of an image. You customize it by adding components to a base image (Amazon Linux, Ubuntu, etc.). Components are build steps written in YAML, and you can combine AWS-provided components (CIS benchmarks, STIG hardening, etc.) with custom components. For more details on recipes and components, check out reference books on Amazon.
Getting Started
Select 'Create image pipeline' in the Image Builder console, then specify a base image and components. Add test components to automate image validation, and configure distribution settings to specify target regions and accounts. Set up a schedule, and up-to-date patched AMIs will be generated automatically on a regular basis.
Things to Watch Out For
- Image Builder itself is free. You pay for the EC2 instances and EBS volumes launched during pipeline execution
- Using CIS benchmark and STIG hardening components lets you automatically create images that meet security standards
