AWS Compute and Auto Scaling

aws ec2 run-instances \
  --image-id ami-0f5ee92e2d63afc18 \
  --instance-type t3.medium \
  --key-name prod-key-ap-south-1 \
  --security-group-ids sg-0a1b2c3d4e5f \
  --subnet-id subnet-private-1a \
  --iam-instance-profile Name=ec2-app-role \
  --tag-specifications \
    'ResourceType=instance,Tags=[{Key=Name,Value=prod-web-01},{Key=Environment,Value=prod}]' \
  --region ap-south-1

## Start browser or CLI terminal session
aws ssm start-session \
  --target i-0abc123def456789 \
  --region ap-south-1

## Run a command on the instance
aws ssm send-command \
  --instance-ids i-0abc123def456789 \
  --document-name AWS-RunShellScript \
  --parameters commands=["sudo systemctl restart nginx"] \
  --region ap-south-1

## Create AMI from running instance
aws ec2 create-image \
  --instance-id i-0abc123def456789 \
  --name "prod-app-v1.4-$(date +%Y%m%d)" \
  --description "App v1.4 with Node 20 and nginx 1.25" \
  --no-reboot \
  --region ap-south-1

## Copy AMI to another region for DR
aws ec2 copy-image \
  --source-image-id ami-0123456789abcdef \
  --source-region ap-south-1 \
  --region ap-southeast-1 \
  --name "prod-app-v1.4-singapore-copy"

## List your custom AMIs
aws ec2 describe-images \
  --owners self \
  --query 'Images[*].[ImageId,Name,CreationDate]' \
  --output table \
  --region ap-south-1

## Create Launch Template
aws ec2 create-launch-template \
  --launch-template-name prod-web-lt \
  --launch-template-data '{
    "ImageId": "ami-0123456789abcdef",
    "InstanceType": "t3.medium",
    "IamInstanceProfile": {"Name": "ec2-app-role"},
    "SecurityGroupIds": ["sg-0a1b2c3d4e5f"],
    "TagSpecifications": [{
      "ResourceType": "instance",
      "Tags": [{"Key": "Environment","Value": "prod"}]
    }]
  }' \
  --region ap-south-1

## Create ASG with the Launch Template
aws autoscaling create-auto-scaling-group \
  --auto-scaling-group-name prod-web-asg \
  --launch-template LaunchTemplateName=prod-web-lt,Version='$Latest' \
  --min-size 2 \
  --max-size 10 \
  --desired-capacity 4 \
  --vpc-zone-identifier "subnet-private-1a,subnet-private-1b" \
  --health-check-type ELB \
  --health-check-grace-period 60 \
  --region ap-south-1

## Add target tracking scaling policy
aws autoscaling put-scaling-policy \
  --auto-scaling-group-name prod-web-asg \
  --policy-name cpu-target-50 \
  --policy-type TargetTrackingScaling \
  --target-tracking-configuration '{
    "PredefinedMetricSpecification": {
      "PredefinedMetricType": "ASGAverageCPUUtilization"
    },
    "TargetValue": 50.0,
    "DisableScaleIn": false
  }' \
  --region ap-south-1

## Create Lambda function from zip
aws lambda create-function \
  --function-name prod-order-processor \
  --runtime python3.12 \
  --role arn:aws:iam::123456789012:role/lambda-exec-role \
  --handler handler.lambda_handler \
  --zip-file fileb://function.zip \
  --memory-size 512 \
  --timeout 30 \
  --environment Variables='{
    "DB_HOST":"db.internal.prod.in",
    "QUEUE_URL":"https://sqs.ap-south-1.amazonaws.com/123456789012/orders"
  }' \
  --vpc-config \
    SubnetIds=subnet-private-1a,subnet-private-1b,SecurityGroupIds=sg-lambda-prod \
  --region ap-south-1

## Set reserved concurrency to protect critical function
aws lambda put-function-concurrency \
  --function-name prod-order-processor \
  --reserved-concurrent-executions 200 \
  --region ap-south-1

## Enable SnapStart for Java functions (free cold start fix)
aws lambda put-function-configuration \
  --function-name prod-java-processor \
  --snap-start ApplyOn=PublishedVersions \
  --region ap-south-1

## Create SQS event source mapping
aws lambda create-event-source-mapping \
  --function-name prod-order-processor \
  --event-source-arn arn:aws:sqs:ap-south-1:123456789012:prod-orders \
  --batch-size 10 \
  --maximum-batching-window-in-seconds 5 \
  --function-response-types ReportBatchItemFailures \
  --region ap-south-1

## Run one-off Fargate task (batch job)
aws ecs run-task \
  --cluster prod-cluster \
  --task-definition prod-data-export:12 \
  --launch-type FARGATE \
  --network-configuration '{
    "awsvpcConfiguration": {
      "subnets": ["subnet-private-1a","subnet-private-1b"],
      "securityGroups": ["sg-ecs-tasks"],
      "assignPublicIp": "DISABLED"
    }
  }' \
  --overrides '{
    "containerOverrides": [{
      "name": "exporter",
      "environment": [{"name":"EXPORT_DATE","value":"2024-01-15"}]
    }]
  }' \
  --region ap-south-1

## Update ECS service (rolling deploy)
aws ecs update-service \
  --cluster prod-cluster \
  --service prod-api-service \
  --task-definition prod-api:25 \
  --force-new-deployment \
  --region ap-south-1