bash
aws ec2 describe-instancesNotes
Foundational EC2 inventory command.
AWS CLI EC2 Cheat Sheet
AWS CLI EC2 commands for instances, AMIs, key pairs, VPC networking, security groups, EBS volumes, and snapshots.
Export
Copy the compact sheet, download it, or print it.
Download
`D` dense toggle · `C` copy all
EC2 Instances
Launch, inspect, and manage EC2 instances.
bash
aws ec2 describe-instances --query 'Reservations[].Instances[].{Id:InstanceId,State:State.Name,Type:InstanceType,Name:Tags[?Key==`Name`]|[0].Value,PrivateIp:PrivateIpAddress}' --output tableNotes
JMESPath makes large instance inventories easier to read.
bash
aws ec2 run-instances --image-id ami-0123456789abcdef0 --instance-type t3.micro --subnet-id subnet-0123456789abcdef0 --security-group-ids sg-0123456789abcdef0 --count 1Notes
Specify AMI, instance type, network placement, and security groups.
bash
aws ec2 start-instances --instance-ids i-0123456789abcdef0Notes
Transitions the instance back to running.
bash
aws ec2 stop-instances --instance-ids i-0123456789abcdef0Notes
Useful for cost savings in non-production environments.
bash
aws ec2 reboot-instances --instance-ids i-0123456789abcdef0Notes
Reboots the instance without changing the root volume contents.
bash
aws ec2 terminate-instances --instance-ids i-0123456789abcdef0Notes
This is destructive and cannot be undone.
Wait until instance is running
Poll until an instance reaches the running state.
bashANYawsec2waiter
bash
aws ec2 wait instance-running --instance-ids i-0123456789abcdef0Notes
Useful after launch scripts.
AMIs and Key Pairs
Image and SSH key workflows.
bash
aws ec2 describe-images --owners self amazonNotes
Useful when selecting machine images for launches.
bash
aws ec2 create-image --instance-id i-0123456789abcdef0 --name web-ami-2026-03-05Notes
Useful for golden-image or backup workflows.
bash
aws ec2 describe-key-pairsNotes
Useful when verifying SSH key names before launch.
bash
aws ec2 create-key-pair --key-name my-key --query 'KeyMaterial' --output text > my-key.pemNotes
Protect the generated private key file and set strict permissions.
bash
aws ec2 delete-key-pair --key-name my-keyNotes
Does not delete any local private key file you may have saved separately.
VPC, Subnets, and Security Groups
Core EC2 networking inventory and updates.
bash
aws ec2 describe-vpcsNotes
Foundational networking inventory command.
bash
aws ec2 describe-subnetsNotes
Useful for selecting subnet placement during launches.
bash
aws ec2 describe-security-groupsNotes
Use queries to narrow to specific ports or group IDs.
Add inbound security group rule
Allow inbound TCP 443 from a CIDR block.
bashANYawsec2security-groupingress
bash
aws ec2 authorize-security-group-ingress --group-id sg-0123456789abcdef0 --protocol tcp --port 443 --cidr 0.0.0.0/0Notes
Adds a new inbound rule to the specified group.
Remove inbound security group rule
Delete an inbound rule from a security group.
bashANYawsec2security-groupingress
bash
aws ec2 revoke-security-group-ingress --group-id sg-0123456789abcdef0 --protocol tcp --port 443 --cidr 0.0.0.0/0Notes
Removes a matching rule from the group.
bash
aws ec2 create-tags --resources i-0123456789abcdef0 vol-0123456789abcdef0 --tags Key=Env,Value=prod Key=App,Value=apiNotes
Use consistent tag sets for cost, ownership, and automation.
EBS Volumes and Snapshots
Manage block storage resources.
bash
aws ec2 describe-volumesNotes
Useful for capacity and orphaned volume checks.
bash
aws ec2 create-volume --availability-zone us-west-2a --size 50 --volume-type gp3Notes
Block storage volumes are AZ-scoped.
bash
aws ec2 attach-volume --volume-id vol-0123456789abcdef0 --instance-id i-0123456789abcdef0 --device /dev/xvdfNotes
The operating system still needs filesystem and mount configuration if appropriate.
bash
aws ec2 create-snapshot --volume-id vol-0123456789abcdef0 --description 'nightly backup'Notes
Snapshots can be used for backup, restore, and AMI workflows.
bash
aws ec2 describe-snapshots --owner-ids selfNotes
Useful for backup inventory and cleanup tasks.
bash
aws ec2 delete-snapshot --snapshot-id snap-0123456789abcdef0Notes
Be careful to preserve restore points required by retention policy.
More in AWS CLI
AWS CLI ECR and ECS Cheat Sheet
AWS CLI ECR and ECS commands for repositories, image login and cleanup, clusters, services, task definitions, and tasks.
AWS CLI CloudFormation Cheat Sheet
AWS CLI CloudFormation commands for templates, stacks, change sets, events, package, and deploy workflows.
AWS CLI IAM and STS Cheat Sheet
AWS CLI IAM and STS commands for users, groups, roles, policies, access keys, caller identity, and assume-role workflows.
AWS CLI S3 Cheat Sheet
High-level and low-level AWS CLI S3 commands for buckets, objects, sync, versioning, encryption, and presigned URLs.
AWS CLI Cheat Sheet
Comprehensive AWS CLI commands for configuration, profiles, global options, queries, and common cross-service recipes.