EC2 Image Builder User Guide EC2 Image Builder User Guide EC2 Image Builder: User Guide Copyright © Amazon Web Services, Inc. and/or its affiliates. All rights reserved. Amazon's trademarks and trade dress may not be used in connection with any product or service that is not Amazon's, in any manner that is likely to cause confusion among customers, or in any manner that disparages or discredits Amazon. All other trademarks not owned by Amazon are the property of their respective owners, who may or may not be affiliated with, connected to, or sponsored by Amazon. EC2 Image Builder User Guide Table of Contents What is EC2 Image Builder? ................................................................................................................. 1 Features of EC2 Image Builder ..................................................................................................... 1 Supported operating systems ...................................................................................................... 2 Supported image formats ........................................................................................................... 2 Concepts ................................................................................................................................... 2 Pricing ...................................................................................................................................... 4 Related AWS services .................................................................................................................. 5 How EC2 Image Builder works ............................................................................................................. 6 AMI elements ............................................................................................................................ 6 Default quotas ........................................................................................................................... 7 AWS Regions and Endpoints ........................................................................................................ 7 Service integrations .................................................................................................................... 7 Amazon CloudWatch Logs ................................................................................................... 7 Amazon EventBridge .......................................................................................................... 8 AWS CloudTrail .................................................................................................................. 9 Component management ............................................................................................................ 9 Image testing .................................................................................................................... 9 Semantic versioning ................................................................................................................... 9 Resources created ..................................................................................................................... 10 Distribution ............................................................................................................................. 11 Sharing Resources .................................................................................................................... 11 Compliance .............................................................................................................................. 11 Get started ...................................................................................................................................... 12 Prerequisites ............................................................................................................................ 12 EC2 Image Builder service-linked role ................................................................................. 12 Configuration requirements ............................................................................................... 12 Container repository (container image pipelines) ................................................................... 13 AWS Identity and Access Management (IAM) ........................................................................ 13 Access EC2 Image Builder .......................................................................................................... 14 Create an image pipeline (AMI) .................................................................................................. 14 Step 1: Specify pipeline details .......................................................................................... 14 Step 2: Choose recipe ....................................................................................................... 15 Step 3: Define infrastructure configuration - optional ........................................................... 16 Step 4: Define distribution settings - optional ...................................................................... 16 Step 5: Review ................................................................................................................. 16 Step 6: Clean up .............................................................................................................. 17 Create an image pipeline (Docker) .............................................................................................. 18 Step 1: Specify pipeline details .......................................................................................... 18 Step 2: Choose recipe ....................................................................................................... 19 Step 3: Define infrastructure configuration - optional ........................................................... 20 Step 4: Define distribution settings - optional ...................................................................... 21 Step 5: Review ................................................................................................................. 21 Step 6: Clean up .............................................................................................................. 21 Component manager ........................................................................................................................ 23 AWSTOE downloads ................................................................................................................. 23 Supported Regions ................................................................................................................... 24 Get started with AWSTOE ......................................................................................................... 25 Verify signature ................................................................................................................ 25 Step 1: Install AWSTOE ..................................................................................................... 29 Step 2: Set AWS credentials .............................................................................................. 29 Step 3: Develop component documents locally .................................................................... 30 Step 4: Validate AWSTOE components ................................................................................ 31 Step 5: Run AWSTOE components ...................................................................................... 31 Use component documents ....................................................................................................... 32 iii EC2 Image Builder User Guide Component document workflow ........................................................................................ 33 Component logging .......................................................................................................... 33 Input and output chaining ................................................................................................. 34 Document schema and definitions ...................................................................................... 35 Document example schemas .............................................................................................. 38 Define variables ............................................................................................................... 41 Use looping constructs ...................................................................................................... 45 Action modules ........................................................................................................................ 52 General execution ............................................................................................................. 53 File download and upload ................................................................................................. 56 File system operation ........................................................................................................ 65 System actions ................................................................................................................. 92 STIG components ..................................................................................................................... 96 Windows STIG components ............................................................................................... 97 Linux STIG components ..................................................................................................