Opportunity Name:
Clean-up Unused AMIs
AWS Resource Type:
EC2 AMIs
Opportunity Description:
EBS-backed AMIs are based on EBS snapshots, which cost money to store in an AWS account. If an AMI hasn't recently been used, it can safely be deregistered. The underlying resources of that AMI (i.e., EBS snapshots) can then be archived or deleted by other fixers. This finder identifies AMIs that are potentially unused and could be deregistered to save costs.
Criteria for identifying the opportunity:
- AMI is not used by any running or stopped instances.
- AMI is not owned by Amazon.
- AMI is not created by AWS Backup service.
- AMI and its associated snapshots have not been used or launched in the last 31 days.
- Annual cost, extrapolated from the last 31 days of usage, exceeds the annual public cost threshold (default $100).
Can CloudFix apply an automatic fix?
No
Other considerations:
- Before deregistering an AMI, ensure that it is not required for future use or by other applications.
- Consider creating a manual snapshot of the AMI for backup purposes before deregistration.
- Review and understand the dependencies of the AMI. Deregistering an AMI will make it unavailable for launching new instances.
- Security concerns: Ensure that deregistering the AMI does not affect your application's compliance and security posture.
Priyanka Bhotika
Comments