Using Tags and Resource Groups in AWS

1. Click Services > Config > Get started.
2. Ensure the checkbox for Record all resources supported in this region is selected.
3. Ensure the radio button for Create a bucket is selected.
4. Ensure the checkbox for Stream configuration changes and notifications to an Amazon SNS topic is NOT checked.
5. If a radio button for Create AWS Config service-linked role is available, then select it, otherwise if a radio button for Use an existing AWS Config service-linked role is available, then select it.
6. Click Next > Next on the AWS Config Rules page > Confirm.

Note: We will return to AWS Config later in this lab.

1. Click Services > EC2.
2. Click Instances on the left-hand menu.
3. Select the instance named Mod. 1 Web Server A.
4. Click Actions > Image > Create Image.
5. Enter "Base AMI - {yyyy-mm-dd}" and replace "{yyyy-mm-dd}" with today’s date.
6. Click Create Image > Close.
7. Click AMIs on the left-hand menu.
8. Select the AMI with the AMI name you just created.
9. Select the Tags tab for the AMI.
10. Click Add/Edit Tags > Create Tag.
11. Enter "AMI Standard" as the key with "{yyyy-mm-dd}" as the value (replace "{yyyy-mm-dd}" with today’s date).
12. Click Save.
13. Once the AMI has a status of available, select the AMI and click Launch.
14. Click Next: Configure Instance Details
15. Leave the defaults, and then click Next: Add Storage > Next: Add Tags.
16. Click Add Tag.
17. Enter "Name" as the key > enter "Test Web Server" as the value.
18. Click Next: Configure Security Group > Select an existing security group.
19. Select the security group with the description Web.
20. Click Review and Launch > Continue to confirm we do not allow port 22 open.
21. In the Boot from General Purpose (SSD) dialog, select Make General Purpose (SSD) the boot volume for this instance.
22. Click Next > Launch.
23. Since we will not be logging into these servers, select "Proceed without a key pair".
24. Select the checkbox to confirm and acknowledge the instance connection.
25. Click Launch Instances > View Instances.

Module 1 Tagging

1. Click Resource Groups at the top of the EC2 Management Console > Tag Editor.
2. Verify that us-east-1 is selected for the Regions section.
3. Select AWS::EC2::Instance and AWS::S3::Bucket as the resource types.
4. Click Search resources.

Note: All the EC2 instances and S3 buckets are shown for this region.

1. Enter "Mod. 1" in the Filter resources search window, and then select the 2 instances.
2. Enter "moduleone" in the Filter resources search window, and then select the S3 bucket.
3. Select the X in the Filter resources search window.
4. Click Manage tags of selected resources.
5. Click Add tag.
6. Enter "Module" as the Tag key > Enter "Starship Monitor" for the Tag value.
7. Click Review and apply tag changes > Apply changes to all selected.

Module 2 Tagging

1. Ensure that we are still on the Tag Editor page.
2. Verify that us-east-1 is selected for the Regions section.
3. Select AWS::EC2::Instance and AWS::S3::Bucket as the resource types.
4. Click Search resources.

Note: All the EC2 instances and S3 buckets are shown for this region.

1. Enter "Mod. 2" in the Filter resources search window and select the 2 instances.
2. Enter moduletwo in the Filter resources search window and select the S3 bucket.
3. Select the X in the Filter resources search window.
4. Click Manage tags of selected resources.
5. Click Add tag.
6. Enter "Module" as the Tag key > Enter "Hyper Drive Design and Analysis" for the Tag value.
7. Click Review and apply tag changes > Apply changes to all selected.

1. Ensure that we are still on the Tag Editor page.
2. Verify that us-east-1 is selected for the Regions section.
3. Select AWS::EC2::Instance and AWS::S3::Bucket as the resource types.
4. Enter "Module" for the Tag key section.
5. Click on the Optional tag value search window > start typing "Hy", then select the Hyper Drive Design and Analysis text that shows up.
6. Select Search resources.
7. Select the link to the EC2 instance for the server with the Tag:Name of "Mod. 2 - Web Server B".

Create Starship Monitor Resource Group

1. Click Resource Groups > Create Resource Group
2. Ensure that Tag base is selected in the Group type section.
3. Enter "Module" within the Tags field and "Starship Monitor" for the Tag value field.
4. Click Add
5. Click View group resources to preview.
6. Under the Group Details section, enter "Starship-Monitor" for the Group name field.
7. Click Create group.

Create Hyper Drive Design and Analysis Resource Group

1. Click Create Resource Group.
2. Ensure that Tag based is selected for the Group name field.
3. Enter "Module" within the Tags field and "Hyper Drive Design and Analysis" for the Tag value field.
4. Click Add.
5. Click View group resources.
6. Enter "Hyper-Drive-Design-and-Analysis" for the Group name field.
7. Click Create group.

Viewing Saved Resource Groups

1. Click Saved Resource Groups on the left-hand side.
2. Click Starship-Monitor
3. Navigate to the an EC2 Instance by clicking on the link in the Group resources section.

1. On the EC2 Management Console page, click Services > EC2.
2. Click AMIs on the left-hand side menu.
3. Select the radio button for the "Base AMI - {yyyy-mm-dd}" we created earlier in this lab.
4. Copy the AMI ID to the clipboard.
5. Navigate back to the AWS Config Console main page.
6. Click Rules on the left-hand side menu.
7. Click Add rule.
8. Select the approved-amis-by-id rule.
9. Select the Tags radio button for Scope of changes.
10. Enter "Module" for the Tag key field.
11. Enter "Starship Monitor" for the Tag value field.
12. Paste the AMI ID that we copied to the clipboard earlier in to the Value field under the Rule parameters section.
13. Click Save.

Note: Let the rule run for a few minutes.

1. Click the approved-amis-by-id link.
2. Click on the link for one of the noncompliant resources. Note: You may see more non-compliant EC2 instances than shown in the video.