AWS In Practice
Courses
  • Welcome to AWS In Practice by IT Assist Labs!
  • Courses
    • AWS Powered E-commerce Application: A Guided Tour
      • Lesson Learning Paths
        • Lesson Learning Paths - Certification Prep
        • Lesson Learning Paths - Interview Prep
      • Lesson Summaries
        • Introduction
          • E-commerce Application Architecture
        • Multi-Account Strategy
          • Multi-Account Strategy Overview
          • Organization Units
          • Core Accounts
        • Core Microservices
          • Services Overview
          • AWS Well-Architected design framework application
          • Site Reliability Engineering Application
          • DevOps Application
          • Monitoring, Logging and Observability Application
        • AWS Service By Layer
          • AWS Service By Layer Overview
          • Presentation Layer
          • Business Logic Layer
          • Data Layer
        • E-commerce Application Use Cases
          • E-commerce Application Use Cases
          • Roles
      • Lesson Content Navigation Demonstration
    • Explore a Live AWS Environment Powering an E-commerce Application
  • Resources
    • AWS Certification Guide
      • Concepts
        • Security, Identity & Compliance
          • AWS IAM-Related Concepts in Certification Exams
        • Design High-Performing Architectures
          • Designing a high-performing architecture with EC2 and Auto Scaling Groups (ASGs)
    • Insights
      • Zero Trust Architecture (ZTA)
      • Implementing a Zero Trust Architecture(ZTA) with AWS
      • The Modern Application Development Lifecycle - Blue/Green Deployments
      • Microservices Communication Patterns
    • Interview Preparation
      • AWS Solutions Archictect
  • AWS Exploration
    • Use Cases
      • Multi-Region Resiliency with Active-Active Setup
        • Exploration Summary
    • Foundational Solutions Architect Use Cases
    • Security Engineer / Cloud Security Architect Use Cases
    • DevOps / Site Reliability Engineer (SRE) Use Cases
    • Cloud Engineer / Cloud Developer
    • Data Engineer Use Cases
    • Machine Learning Engineer / AI Practitioner Use Cases
    • Network Engineer (Cloud) Use Cases
    • Cost Optimization / FinOps Practitioner Use Cases
    • IT Operations / Systems Administrator Use Cases
  • Study Group
    • AWS Certified Solutions Architect - Associate
      • Study Guide Introduction
      • Domain 1: Design Secure Architectures
        • Task Statement 1.1: Design secure access to AWS resources
          • SecureCart's Journey
          • AWS Identity & Access Management (IAM) Fundamentals
          • AWS Security Token Service (STS)
          • AWS Organization
          • IAM Identity Center
          • AWS Policies
          • Federated Access
          • Directory Service
          • Managing Access Across Multiple Accounts
          • Authorization Models in IAM
          • AWS Control Tower
          • AWS Service Control Policies (SCPs)
          • Use Cases
            • Using IAM Policies and Tags for Access Control in AWS
        • Task Statement 1.2: Design Secure Workloads and Applications
          • SecureCart Journey
          • Application Configuration & Credential Security
          • Copy of Application Configuration & Credential Security
          • Network Segmentation Strategies & Traffic Control
          • Securing Network Traffic & AWS Service Endpoints
          • Protecting Applications from External Threats
          • Securing External Network Connections
          • AWS Network Firewall
          • AWS Firewall Manager
          • IAM Authentication Works with Databases
          • AWS WAF (Web Application Firewall)
          • Use Cases
            • AWS Endpoint Policy for Trusted S3 Buckets
            • Increasing Fault Tolerance for AWS Direct Connect in SecureCart’s Multi-VPC Network
            • Securing Multi-Domain SSL with ALB in SecureCart Using SNI-Based SSL
            • Configuring a Custom Domain Name for API Gateway with AWS Certificate Manager and Route 53
            • Application Load Balancer (ALB) – Redirecting HTTP to HTTPS
            • Security Considerations in ALB Logging & Monitoring
          • Amazon CloudFront and Different Origin Use Cases
          • Security Group
          • CloudFront
          • NACL
          • Amazon Cognito
          • VPC Endpoint
        • Task Statement 1.3: Determine appropriate data security controls
          • SecureCart Journey
          • Data Access & Governance
          • Data Encryption & Key Management
          • Data Retention, Classification & Compliance
          • Data Backup, Replication & Recovery
          • Managing Data Lifecycle & Protection Policies
          • KMS
          • S3 Security Measures
          • KMS Use Cases
          • Use Cases
            • Safely Storing Sensitive Data on EBS and S3
            • Managing Compliance & Security with AWS Config
            • Preventing Sensitive Data Exposure in Amazon S3
            • Encrypting EBS Volumes for HIPAA Compliance
            • EBS Encryption Behavior
            • Using EBS Volume While Snapshot is in Progress
          • Compliance
          • Implementing Access Policies for Encryption Keys
          • Rotating Encryption Keys and Renewing Certificates
          • Implementing Policies for Data Access, Lifecycle, and Protection
          • Rotating encryption keys and renewing certificates
          • Instance Store
          • AWS License Manager
          • Glacier
          • AWS CloudHSM Key Management & Zeroization Protection
          • EBS
        • AWS Security Services
        • Use Cases
          • IAM Policy & Directory Setup for S3 Access via Single Sign-On (SSO)
          • Federating AWS Access with Active Directory (AD FS) for Hybrid Cloud Access
      • Domain 2
        • Task Statement 2.1: Design Scalable and Loosely Coupled Architectures
          • SecureCart Journey
          • API Creation & Management
          • Microservices & Event-Driven Architectures
          • Load Balancing & Scaling Strategies
          • Caching Strategies & Edge Acceleration
          • Serverless & Containerization
          • Workflow Orchestration & Multi-Tier Architectures
        • Task Statement 2.2: Design highly available and/or fault-tolerant architectures
          • SecureCart Journey
          • AWS Global Infrastructure & Distributed Design
          • Load Balancing & Failover Strategies
          • Disaster Recovery (DR) Strategies & Business Continuity
          • Automation & Immutable Infrastructure
          • Monitoring & Workload Visibility
          • Use Cases
            • Amazon RDS Failover Events & Automatic Failover Mechanism
      • Domain 3
        • Task Statement 3.1: Determine high-performing and/or scalable storage solutions
          • SecureCart Journey
          • Understanding AWS Storage Types & Use Cases
          • Storage Performance & Configuration Best Practices
          • Scalable & High-Performance Storage Architectures
          • Hybrid & Multi-Cloud Storage Solutions
          • Storage Optimization & Cost Efficiency
          • Hands-on Labs & Final Challenge
        • Task Statement 3.2: Design High-Performing and Elastic Compute Solutions
          • SecureCart
          • AWS Compute Services & Use Cases
          • Elastic & Auto-Scaling Compute Architectures
          • Decoupling Workloads for Performance
          • Serverless & Containerized Compute Solutions
          • Compute Optimization & Cost Efficiency
        • Task Statement 3.3: Determine High-Performing Database Solutions
          • SecureCart Journey
          • AWS Database Types & Use Cases
          • Database Performance Optimization
          • Caching Strategies for High-Performance Applications
          • Database Scaling & Replication
          • High Availability & Disaster Recovery for Databases
        • Task Statement 3.4: Determine High-Performing and/or Scalable Network Architectures
          • SecureCart Journey
          • AWS Networking Fundamentals & Edge Services
          • Network Architecture & Routing Strategies
          • Load Balancing for Scalability & High Availability
          • Hybrid & Private Network Connectivity
          • Optimizing Network Performance
          • Site-to-Site VPN Integration for SAP HANA in AWS
        • Task Statement 3.5: Determine High-Performing Data Ingestion and Transformation Solutions
          • SecureCart Journey
          • Data Ingestion Strategies & Patterns
          • Data Transformation & ETL Pipelines
          • Secure & Scalable Data Transfer
          • Building & Managing Data Lakes
          • Data Visualization & Analytics
      • Domain 4
        • Task Statement 4.1: Design Cost-Optimized Storage Solutions
          • SecureCart Journey
          • AWS Storage Services & Cost Optimization
          • Storage Tiering & Auto Scaling
          • Data Lifecycle Management & Archival Strategies
          • Hybrid Storage & Data Migration Cost Optimization
          • Cost-Optimized Backup & Disaster Recovery
        • Task Statement 4.2: Design Cost-Optimized Compute Solutions
          • SecureCart Journey
          • AWS Compute Options & Cost Management Tools
          • Compute Purchasing Models & Optimization
          • Scaling Strategies for Cost Efficiency
          • Serverless & Container-Based Cost Optimization
          • Hybrid & Edge Compute Cost Strategies
          • AWS License Manager
        • Task Statement 4.3: Design cost-optimized database solutions
          • SecureCart Journey
          • AWS Database Services & Cost Optimization Tools
          • Database Sizing, Scaling & Capacity Planning
          • Caching Strategies for Cost Efficiency
          • Backup, Retention & Disaster Recovery
          • Cost-Optimized Database Migration Strategies
        • Task Statement 4.4: Design Cost-Optimized Network Architectures
          • SecureCart Journey
          • AWS Network Cost Management & Monitoring
          • Load Balancing & NAT Gateway Cost Optimization
          • Network Connectivity & Peering Strategies
          • Optimizing Data Transfer & Network Routing Costs
          • Content Delivery Network & Edge Caching
      • Week Nine
        • Final Review Session
        • Final Practice Test
Powered by GitBook

@ 2024 IT Assist LLC

On this page
  • πŸ”Ή Understanding Instance Store vs. EBS Volumes
  • πŸ”Ή What Happens to Data on Termination?
  • πŸ”Ή SecureCart Use Case: Managing Web Application Storage
  • πŸ”Ή Best Practices for Data Persistence
  • πŸ”Ή Common Mistakes & How to Avoid Them
  • βœ… Summary
  1. Study Group
  2. AWS Certified Solutions Architect - Associate
  3. Domain 1: Design Secure Architectures
  4. Task Statement 1.3: Determine appropriate data security controls

Instance Store

Amazon EC2 instances use Amazon Elastic Block Store (EBS) or Instance Store volumes as their root volumes. When an Instance Store-backed EC2 instance is terminated, its data is lost permanently. Understanding EBS vs. Instance Store is crucial for managing persistent data, backups, and disaster recovery.

This guide covers: βœ” Understanding Instance Store vs. EBS Volumes βœ” What Happens to Data on Termination? βœ” Best Practices for Data Persistence βœ” SecureCart Use Case: Managing Web Application Storage βœ” Common Mistakes & How to Avoid Them


πŸ”Ή Understanding Instance Store vs. EBS Volumes

Volume Type

Persistent Storage?

Attached To?

Use Case

Instance Store

❌ No

Specific EC2 instance

High-performance temporary storage (e.g., cache, buffer)

Amazon EBS

βœ… Yes

Any EC2 instance in the same AZ

Persistent storage for OS, databases, logs

πŸ”Ή Key Difference:

  • Instance Store is ephemeral (data is lost when the instance stops or terminates).

  • EBS Volumes persist beyond instance lifecycle unless manually deleted.


πŸ”Ή What Happens to Data on Termination?

Instance Type

Data Behavior on Termination

Instance Store-backed AMI

🚨 All data is lost permanently

EBS-backed AMI

βœ… Root volume deleted (unless "Delete on Termination" is disabled)

Attached EBS Volumes (non-root)

βœ… Data persists

βœ… How to Check If Your EC2 Instance is Using Instance Store?

  1. Navigate to EC2 Console β†’ Select the Instance.

  2. Check Storage Type under Instance Details.

  3. If the root volume is Instance Store, data will be lost on termination.


πŸ”Ή SecureCart Use Case: Managing Web Application Storage

SecureCart, an e-commerce platform, hosts its web application on EC2 and needs persistent storage for user sessions, logs, and database records.

βœ… SecureCart’s Storage Needs: βœ” Web application files must persist even after instance termination. βœ” Application logs should not be lost (used for debugging and compliance). βœ” Product images must be stored safely for quick retrieval.

πŸ”Ή What SecureCart Uses: βœ” Amazon EBS for persistent storage of logs, application code, and configurations. βœ” Amazon S3 for product images & backups (cheaper and more scalable). βœ” Amazon RDS for transactional data (instead of self-managed database on EC2).


πŸ”Ή Best Practices for Data Persistence

1️⃣ If Using Instance Store: Take Regular Backups

βœ” Store critical files in Amazon S3 or Amazon EFS before termination. βœ” Use Amazon FSx or EFS for shared storage between multiple instances.

2️⃣ Convert Instance Store to EBS for Persistence

βœ… Steps to Migrate Data from Instance Store to EBS:

  1. Create an Amazon Machine Image (AMI) from the existing instance.

  2. Launch a new EC2 instance using an EBS-backed AMI.

  3. Attach an EBS volume and copy critical data from the instance store.

3️⃣ Modify EBS "Delete on Termination" Flag

By default, EBS root volumes are deleted when an instance is terminated.

βœ… Steps to Keep Data After Termination:

  1. Go to EC2 Console β†’ Select the instance.

  2. Under Storage, find the EBS volume.

  3. Modify Delete on Termination to ❌ Disabled.


πŸ”Ή Common Mistakes & How to Avoid Them

Mistake

Impact

Solution

Using Instance Store for critical data

Data lost on instance termination

Use EBS or S3 for persistent storage

Not backing up instance store data

Permanent loss of application files

Create regular S3 backups

Leaving EBS "Delete on Termination" enabled

Root volume lost with instance

Disable Delete on Termination for persistent storage

Assuming Instance Store can be detached & reattached

Cannot recover data after instance termination

Use EBS for detachable storage


βœ… Summary

βœ” Instance Store is ephemeral; all data is lost on termination. βœ” EBS is persistent; data remains unless explicitly deleted. βœ” SecureCart uses EBS for application storage & S3 for backups. βœ” Modify "Delete on Termination" settings to retain EBS volumes. βœ” Convert Instance Store-backed AMIs to EBS-backed AMIs for persistence.

PreviousRotating encryption keys and renewing certificatesNextAWS License Manager

Last updated 2 months ago