Awsclaw Ec2

Awsclaw EC2

Manage EC2 compute and networking resources with full lifecycle operations including creation, modification, and deletion.

When to Use This Skill

Use this skill when the user:

• Wants to launch, start, stop, terminate, or reboot EC2 instances
• Needs to create or delete VPCs, subnets, security groups, or route tables
• Wants to manage security group rules (ingress/egress)
• Needs to create, attach, or delete EBS volumes and snapshots
• Wants to create AMIs or manage launch templates
• Needs to allocate Elastic IPs or manage internet/NAT gateways
• Wants to tag resources
• Asks about EC2 instances, their status, or console output
• Wants to explore VPCs, subnets, security groups, or route tables
• Needs to list volumes, snapshots, or key pairs
• Wants to check instance types, pricing, or availability
• Asks about networking (internet gateways, NAT gateways, network interfaces, flow logs)
• Wants to inspect launch templates, transit gateways, or VPC endpoints

Tool: EC2Tool

Execute AWS EC2 commands for managing compute and network resources. ALWAYS provide params object. Supports read operations, instance lifecycle (launch, start, stop, terminate, reboot), VPC/network creation and configuration (VPCs, subnets, security groups, internet/NAT gateways, route tables), storage (volumes, snapshots, AMIs), and resource tagging.

Lifecycle Management Commands

RunInstances

Launch new EC2 instances.

{ "command": "RunInstances", "params": { "ImageId": "ami-0abcdef1234567890", "InstanceType": "t3.micro", "MinCount": 1, "MaxCount": 1, "KeyName": "my-key", "SecurityGroupIds": ["sg-12345"], "SubnetId": "subnet-12345" } }

Parameters:

TerminateInstances

Terminate EC2 instances.

{ "command": "TerminateInstances", "params": { "InstanceIds": ["i-1234567890abcdef0"] } }

StopInstances

Stop running instances.

{ "command": "StopInstances", "params": { "InstanceIds": ["i-1234567890abcdef0"], "Force": false } }

StartInstances

Start stopped instances.

{ "command": "StartInstances", "params": { "InstanceIds": ["i-1234567890abcdef0"] } }

RebootInstances

Reboot instances.

{ "command": "RebootInstances", "params": { "InstanceIds": ["i-1234567890abcdef0"] } }

VPC and Network Management

CreateVpc

Create a new VPC.

{ "command": "CreateVpc", "params": { "CidrBlock": "10.0.0.0/16", "Tags": [{ "Key": "Name", "Value": "MyVPC" }] } }

Parameters:

DeleteVpc

{ "command": "DeleteVpc", "params": { "VpcId": "vpc-12345" } }

CreateSubnet

Create a subnet in a VPC.

{ "command": "CreateSubnet", "params": { "VpcId": "vpc-12345", "CidrBlock": "10.0.1.0/24", "AvailabilityZone": "us-east-1a" } }

Parameters:

DeleteSubnet

{ "command": "DeleteSubnet", "params": { "SubnetId": "subnet-12345" } }

CreateSecurityGroup

Create a security group.

{ "command": "CreateSecurityGroup", "params": { "GroupName": "MySecurityGroup", "Description": "My security group description", "VpcId": "vpc-12345" } }

Parameters:

DeleteSecurityGroup

{ "command": "DeleteSecurityGroup", "params": { "GroupId": "sg-12345" } }

AuthorizeSecurityGroupIngress

Add inbound rules to security group.

{ "command": "AuthorizeSecurityGroupIngress", "params": { "GroupId": "sg-12345", "IpPermissions": [{ "IpProtocol": "tcp", "FromPort": 22, "ToPort": 22, "IpRanges": [{ "CidrIp": "0.0.0.0/0" }] }] } }

AuthorizeSecurityGroupEgress

Add outbound rules to security group.

{ "command": "AuthorizeSecurityGroupEgress", "params": { "GroupId": "sg-12345", "IpPermissions": [{ "IpProtocol": "-1", "IpRanges": [{ "CidrIp": "0.0.0.0/0" }] }] } }

RevokeSecurityGroupIngress

Remove inbound rules.

{ "command": "RevokeSecurityGroupIngress", "params": { "GroupId": "sg-12345", "IpPermissions": [{ "IpProtocol": "tcp", "FromPort": 22, "ToPort": 22 }] } }

RevokeSecurityGroupEgress

Remove outbound rules.

{ "command": "RevokeSecurityGroupEgress", "params": { "GroupId": "sg-12345", "IpPermissions": [{ "IpProtocol": "-1" }] } }

Storage Management

CreateVolume

Create an EBS volume.

{ "command": "CreateVolume", "params": { "AvailabilityZone": "us-east-1a", "Size": 100, "VolumeType": "gp3", "Tags": [{ "Key": "Name", "Value": "MyVolume" }] } }

Parameters:

DeleteVolume

{ "command": "DeleteVolume", "params": { "VolumeId": "vol-12345" } }

AttachVolume

Attach volume to instance.

{ "command": "AttachVolume", "params": { "VolumeId": "vol-12345", "InstanceId": "i-12345", "Device": "/dev/sdf" } }

Parameters:

DetachVolume

{ "command": "DetachVolume", "params": { "VolumeId": "vol-12345", "Force": false } }

CreateSnapshot

Create snapshot from volume.

{ "command": "CreateSnapshot", "params": { "VolumeId": "vol-12345", "Description": "My snapshot" } }

DeleteSnapshot

{ "command": "DeleteSnapshot", "params": { "SnapshotId": "snap-12345" } }

CreateImage

Create AMI from instance.

{ "command": "CreateImage", "params": { "InstanceId": "i-12345", "Name": "MyAMI", "Description": "My custom AMI", "NoReboot": true } }

DeregisterImage

Delete an AMI.

{ "command": "DeregisterImage", "params": { "ImageId": "ami-12345" } }

Resource Tagging

CreateTags

Add tags to resources.

{ "command": "CreateTags", "params": { "Resources": ["i-12345", "vol-12345"], "Tags": [{ "Key": "Environment", "Value": "Production" }] } }

Parameters:

DeleteTags

Remove tags from resources.

{ "command": "DeleteTags", "params": { "Resources": ["i-12345"], "Tags": [{ "Key": "Environment" }] } }

Networking - Gateways and Routes

CreateInternetGateway

Create internet gateway.

{ "command": "CreateInternetGateway", "params": {} }

AttachInternetGateway

Attach internet gateway to VPC.

{ "command": "AttachInternetGateway", "params": { "InternetGatewayId": "igw-12345", "VpcId": "vpc-12345" } }

DetachInternetGateway

{ "command": "DetachInternetGateway", "params": { "InternetGatewayId": "igw-12345", "VpcId": "vpc-12345" } }

DeleteInternetGateway

{ "command": "DeleteInternetGateway", "params": { "InternetGatewayId": "igw-12345" } }

CreateNatGateway

Create NAT gateway.

{ "command": "CreateNatGateway", "params": { "SubnetId": "subnet-12345", "AllocationId": "eipalloc-12345" } }

DeleteNatGateway

{ "command": "DeleteNatGateway", "params": { "NatGatewayId": "nat-12345" } }

CreateRouteTable

Create route table.

{ "command": "CreateRouteTable", "params": { "VpcId": "vpc-12345" } }

DeleteRouteTable

{ "command": "DeleteRouteTable", "params": { "RouteTableId": "rtb-12345" } }

CreateRoute

Add route to route table.

{ "command": "CreateRoute", "params": { "RouteTableId": "rtb-12345", "DestinationCidrBlock": "0.0.0.0/0", "GatewayId": "igw-12345" } }

DeleteRoute

{ "command": "DeleteRoute", "params": { "RouteTableId": "rtb-12345", "DestinationCidrBlock": "0.0.0.0/0" } }

AssociateRouteTable

Associate route table with subnet.

{ "command": "AssociateRouteTable", "params": { "RouteTableId": "rtb-12345", "SubnetId": "subnet-12345" } }

DisassociateRouteTable

{ "command": "DisassociateRouteTable", "params": { "AssociationId": "rtbassoc-12345" } }

Elastic IPs

AllocateAddress

Allocate Elastic IP.

{ "command": "AllocateAddress", "params": { "Domain": "vpc" } }

ReleaseAddress

Release Elastic IP.

{ "command": "ReleaseAddress", "params": { "AllocationId": "eipalloc-12345" } }

AssociateAddress

Associate Elastic IP with instance.

{ "command": "AssociateAddress", "params": { "AllocationId": "eipalloc-12345", "InstanceId": "i-12345" } }

DisassociateAddress

{ "command": "DisassociateAddress", "params": { "AssociationId": "eipassoc-12345" } }

Key Pairs and Launch Templates

CreateKeyPair

Create SSH key pair.

{ "command": "CreateKeyPair", "params": { "KeyName": "my-key-pair" } }

DeleteKeyPair

{ "command": "DeleteKeyPair", "params": { "KeyName": "my-key-pair" } }

CreateLaunchTemplate

Create launch template.

{ "command": "CreateLaunchTemplate", "params": { "LaunchTemplateName": "MyTemplate", "LaunchTemplateData": { "ImageId": "ami-12345", "InstanceType": "t3.micro" } } }

DeleteLaunchTemplate

{ "command": "DeleteLaunchTemplate", "params": { "LaunchTemplateId": "lt-12345" } }

Query Commands

DescribeInstances

Describe one or more EC2 instances.

{ "command": "DescribeInstances", "params": { "InstanceIds": ["i-1234567890abcdef0"] } }

{ "command": "DescribeInstances", "params": { "Filters": [{ "Name": "instance-state-name", "Values": ["running"] }] } }

Parameters:

DescribeInstanceStatus

Get status checks for instances.

{ "command": "DescribeInstanceStatus", "params": { "InstanceIds": ["i-1234567890abcdef0"] } }

Parameters:

DescribeInstanceTypes

Get details about instance types (CPU, memory, networking).

{ "command": "DescribeInstanceTypes", "params": { "InstanceTypes": ["t3.micro", "m5.large"] } }

Parameters:

DescribeInstanceTypeOfferings

List instance types available in specific locations.

{ "command": "DescribeInstanceTypeOfferings", "params": { "LocationType": "availability-zone", "Filters": [{ "Name": "instance-type", "Values": ["t3.*"] }] } }

Parameters:

DescribeImages

Describe AMIs (Amazon Machine Images).

{ "command": "DescribeImages", "params": { "Owners": ["self"], "Filters": [{ "Name": "state", "Values": ["available"] }] } }

Parameters:

DescribeVpcs

Describe VPCs.

{ "command": "DescribeVpcs", "params": {} }

Parameters:

DescribeSubnets

Describe subnets.

{ "command": "DescribeSubnets", "params": { "Filters": [{ "Name": "vpc-id", "Values": ["vpc-12345"] }] } }

Parameters:

DescribeSecurityGroups

Describe security groups.

{ "command": "DescribeSecurityGroups", "params": { "GroupIds": ["sg-12345"] } }

Parameters:

DescribeSecurityGroupRules

Describe security group rules.

{ "command": "DescribeSecurityGroupRules", "params": { "Filters": [{ "Name": "group-id", "Values": ["sg-12345"] }] } }

Parameters:

DescribeVolumes

Describe EBS volumes.

{ "command": "DescribeVolumes", "params": { "Filters": [{ "Name": "attachment.instance-id", "Values": ["i-12345"] }] } }

Parameters:

DescribeSnapshots

Describe EBS snapshots.

{ "command": "DescribeSnapshots", "params": { "Filters": [{ "Name": "volume-id", "Values": ["vol-12345"] }] } }

Parameters:

DescribeKeyPairs

Describe key pairs.

{ "command": "DescribeKeyPairs", "params": {} }

Parameters:

DescribeAddresses

Describe Elastic IP addresses.

{ "command": "DescribeAddresses", "params": {} }

Parameters:

DescribeRegions

Describe available AWS regions.

{ "command": "DescribeRegions", "params": {} }

Parameters:

DescribeAvailabilityZones

Describe availability zones.

{ "command": "DescribeAvailabilityZones", "params": {} }

Parameters:

DescribeRouteTables

Describe route tables.

{ "command": "DescribeRouteTables", "params": { "Filters": [{ "Name": "vpc-id", "Values": ["vpc-12345"] }] } }

Parameters:

DescribeInternetGateways

Describe internet gateways.

{ "command": "DescribeInternetGateways", "params": { "InternetGatewayIds": ["igw-12345"] } }

Parameters:

DescribeNatGateways

Describe NAT gateways.

{ "command": "DescribeNatGateways", "params": { "NatGatewayIds": ["nat-12345"] } }

Parameters:

DescribeNetworkInterfaces

Describe network interfaces.

{ "command": "DescribeNetworkInterfaces", "params": { "Filters": [{ "Name": "vpc-id", "Values": ["vpc-12345"] }] } }

Parameters:

DescribeFlowLogs

Describe VPC flow logs.

{ "command": "DescribeFlowLogs", "params": { "FlowLogIds": ["fl-12345"] } }

Parameters:

DescribeTags

Describe tags across EC2 resources.

{ "command": "DescribeTags", "params": { "Filters": [{ "Name": "resource-id", "Values": ["i-12345"] }] } }

Parameters:

DescribeLaunchTemplates

Describe launch templates.

{ "command": "DescribeLaunchTemplates", "params": { "LaunchTemplateIds": ["lt-12345"] } }

Parameters:

DescribeTransitGateways

Describe transit gateways.

{ "command": "DescribeTransitGateways", "params": { "TransitGatewayIds": ["tgw-12345"] } }

Parameters:

DescribeVpcEndpoints

Describe VPC endpoints.

{ "command": "DescribeVpcEndpoints", "params": { "VpcEndpointIds": ["vpce-12345"] } }

Parameters:

DescribeVpcPeeringConnections

Describe VPC peering connections.

{ "command": "DescribeVpcPeeringConnections", "params": { "VpcPeeringConnectionIds": ["pcx-12345"] } }

Parameters:

DescribeSpotPriceHistory

Get spot instance pricing history.

{ "command": "DescribeSpotPriceHistory", "params": { "InstanceTypes": ["m5.large"], "ProductDescriptions": ["Linux/UNIX"], "StartTime": "2024-01-01T00:00:00Z" } }

Parameters:

DescribeAccountAttributes

Describe EC2 account attributes (limits).

{ "command": "DescribeAccountAttributes", "params": {} }

Parameters: None required.

GetConsoleOutput

Get the console output from an instance.

{ "command": "GetConsoleOutput", "params": { "InstanceId": "i-1234567890abcdef0" } }

Parameters:

GetLaunchTemplateData

Get launch template data from an instance.

{ "command": "GetLaunchTemplateData", "params": { "InstanceId": "i-1234567890abcdef0" } }

Parameters:

GetPasswordData

Get Windows instance password data.

{ "command": "GetPasswordData", "params": { "InstanceId": "i-1234567890abcdef0" } }

Parameters:

GetHostReservationPurchasePreview

Preview a host reservation purchase.

{ "command": "GetHostReservationPurchasePreview", "params": {} }

Related Services

• EC2 → CloudWatch: VPC Flow Logs deliver to CloudWatch Log Groups. Use DescribeFlowLogs to find the log group name, then CloudWatchLogTool to read logs
• EC2 → VPC/Subnet/SecurityGroup: Instance metadata contains vpcId, subnetId, securityGroups — use these IDs with DescribeVpcs, DescribeSubnets, DescribeSecurityGroups
• EC2 → IAM: Instance profiles link to IAM roles. Use IAMTool to inspect the role
• EC2 → CloudFormation: EC2 instances created by CloudFormation can be found via CloudFormationTool DescribeStackResources
• EC2 → S3: Instances use S3 for user data scripts, AMI snapshots; check instance user data for S3 references
• EC2 → EBS: Use DescribeVolumes with filter attachment.instance-id to find volumes attached to an instance