ec2

Manage AWS EC2 lifecycle, networking, storage, and external reachability checks.

Updated Feb 16, 2026
One-click install
npx skills add https://github.com/aurainfosec/cloud-review-automation-poc --skill ec2-aurainfosec
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: ec2
Source: https://github.com/aurainfosec/cloud-review-automation-poc/tree/main/skills/ec2
Command: npx skills add https://github.com/aurainfosec/cloud-review-automation-poc --skill ec2-aurainfosec

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps you manage AWS EC2 operations and validate whether instances are reachable and exposed, reducing time spent on manual checks and misconfigurations.

Core Features & Use Cases

  • Instance lifecycle and networking guidance: Covers launching instances, configuring security groups, key pairs, subnets, and IMDSv2 to reduce common hardening gaps.
  • Storage and image management: Shows how to create and manage AMIs and EBS volumes/snapshots for reliable operations and backups.
  • External accessibility and TLS probing: Supports an evidence-based workflow using public IP discovery, nmap reachability tests, and testssl.sh validation for HTTPS posture.
  • Troubleshooting reachability: Provides CLI check patterns and safer connectivity alternatives like SSM Session Manager when SSH fails.

Quick Start

Ask your security assistant to assess whether a given EC2 instance is internet-reachable and, if HTTPS is exposed, verify TLS configuration using nmap and testssl.sh.

Frequently Asked Questions about ec2

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check if my AWS EC2 instance is reachable from the internet?

To check EC2 internet reachability, discover the instance public IP using AWS CLI and run nmap-based unauthenticated probing to validate external accessibility and security group exposure.

How do I enforce IMDSv2 on AWS EC2 instances to improve security posture?

Enforce IMDSv2 on EC2 instances by applying instance metadata service hardening configurations during launch or via modification, reducing common security gaps associated with IMDSv1 fallback.

How do I validate HTTPS TLS configuration on a public-facing EC2 instance?

Validate HTTPS TLS configuration on a public EC2 instance by running testssl.sh against the discovered public IP to assess cipher strength and certificate posture after confirming reachability.

What is the best way to troubleshoot SSH connectivity failures to an EC2 instance?

Troubleshoot EC2 SSH connectivity failures by running AWS CLI security group and subnet checks, then use safer connectivity alternatives like SSM Session Manager to regain access without port 22 exposure.

How do I manage EBS snapshots and AMIs for AWS EC2 backup operations?

Manage EC2 backup operations by creating and configuring AMIs and EBS volume snapshots through AWS CLI, ensuring reliable instance recovery and storage persistence across lifecycle operations.

Do I need AWS CLI installed to assess EC2 security groups and external exposure?

Yes, AWS CLI is required to gather evidence for public IP discovery and security group context, providing the necessary configuration data before executing external reachability probing and TLS validation.