Amazon EC2

Amazon EC2 provides resizable virtual servers in AWS. The EC2 API also covers the VPC networking around them (subnets, route tables, NAT and internet gateways, security groups, network interfaces, and Elastic IP addresses) and the EBS volumes and snapshots that back them.

With the Amazon EC2 block, you can:

Inventory and control instances: List instances with their state, type, IPs, and tags, read status checks and scheduled maintenance events, and start, stop, reboot, or terminate instances
Manage Elastic IPs: List Elastic IP addresses and what they are attached to, allocate new addresses, associate them with an instance or network interface, disassociate them, and release them
Inspect VPC networking: Read VPCs, subnets, route tables with their routes and associations, NAT gateways with their public IPs, internet gateways, network ACLs, VPC endpoints, VPC peering connections, security groups with their inbound and outbound rules, and network interfaces
Control security group ingress: Add an inbound rule, or revoke rules by rule ID or by protocol, ports, and source
Work with EBS: List volumes and snapshots, create a snapshot of a volume, and delete volumes and snapshots
Tag resources: Add, overwrite, or remove tags on any EC2 resource ID
Explore the account: List AMIs, key pairs, Regions, and Availability Zones

Credentials and permissions

The block authenticates with an AWS access key ID and secret access key and runs in the region you set. Grant the IAM principal only the EC2 actions the operations you use require. Each operation maps to the IAM action of the same name, for example ec2:DescribeAddresses, ec2:DescribeNatGateways, and ec2:DescribeRouteTables for a read-only egress audit, or ec2:StopInstances and ec2:StartInstances for scheduling.

List operations accept EC2 filters such as [{"Name": "vpc-id", "Values": ["vpc-0abc123"]}]. Without IDs they return up to 100 results per page, with a nextToken for the next page.

In Sim, the Amazon EC2 block lets your agents map which public IPs your subnets egress through, find idle Elastic IPs and unattached volumes, audit and close open security group rules, back up volumes and prune old snapshots on a schedule, and stop non-production instances outside working hours.

Use the block

Integrate Amazon EC2 into workflows. Describe and control instances, manage Elastic IP addresses, inspect VPCs, subnets, route tables, NAT and internet gateways, security groups, and network interfaces, add and revoke security group ingress rules, inspect network ACLs, VPC endpoints, and peering connections, work with EBS volumes and snapshots, list AMIs and key pairs, and tag resources. Requires an AWS access key with the matching ec2:* IAM permissions.

Actions

EC2 Describe Instances

List EC2 instances with their state, type, networking, and tags

Inputs and outputs

Input

Parameter	Type	Required	Description
`awsRegion`	string	Yes	AWS region (e.g., us-east-1)
`awsAccessKeyId`	string	Yes	AWS access key ID
`awsSecretAccessKey`	string	Yes	AWS secret access key
`instanceIds`	string	No	Comma-separated instance IDs (e.g., i-0abc123,i-0def456). Leave empty to list all
`filters`	json	No	EC2 filters as a JSON array, e.g. [{"Name":"instance-state-name","Values":["running"]}]
`maxResults`	number	No	Maximum results per page when no IDs are given (5-1000, default 100)
`nextToken`	string	No	Pagination token from a previous response

Output

Parameter	Type	Description
`nextToken`	string	Pagination token for the next page, or null when there are no more results
`instances`	array	EC2 instances
↳ `tags`	json	Resource tags as key/value pairs
↳ `instanceId`	string	Instance ID
↳ `instanceType`	string	Instance type (e.g., t3.micro)
↳ `state`	string	Instance state (pending, running, stopping, stopped, shutting-down, terminated)
↳ `stateReason`	string	Reason for the most recent state transition
↳ `launchTime`	string	Launch time (ISO 8601)
↳ `availabilityZone`	string	Availability Zone
↳ `vpcId`	string	VPC ID
↳ `subnetId`	string	Subnet ID
↳ `privateIpAddress`	string	Primary private IPv4 address
↳ `publicIpAddress`	string	Public IPv4 address
↳ `privateDnsName`	string	Private DNS name
↳ `publicDnsName`	string	Public DNS name
↳ `imageId`	string	AMI ID used to launch the instance
↳ `keyName`	string	Key pair name
↳ `platformDetails`	string	Platform details (e.g., Linux/UNIX, Windows)
↳ `architecture`	string	CPU architecture
↳ `iamInstanceProfileArn`	string	ARN of the attached IAM instance profile
↳ `securityGroups`	array	Attached security groups
↳ `groupId`	string	Security group ID
↳ `groupName`	string	Security group name

EC2 Describe Instance Status

Get status checks and scheduled events for EC2 instances

Inputs and outputs

Input

Parameter	Type	Required	Description
`awsRegion`	string	Yes	AWS region (e.g., us-east-1)
`awsAccessKeyId`	string	Yes	AWS access key ID
`awsSecretAccessKey`	string	Yes	AWS secret access key
`instanceIds`	string	No	Comma-separated instance IDs (max 100). Leave empty to describe all
`filters`	json	No	EC2 filters as a JSON array, e.g. [{"Name":"instance-status.status","Values":["impaired"]}]
`includeAllInstances`	boolean	No	Include instances that are not running (by default only running instances are returned)
`maxResults`	number	No	Maximum results per page when no IDs are given (5-1000, default 100)
`nextToken`	string	No	Pagination token from a previous response

Output

Parameter	Type	Description
`nextToken`	string	Pagination token for the next page, or null when there are no more results
`instanceStatuses`	array	Status of each instance
↳ `instanceId`	string	Instance ID
↳ `availabilityZone`	string	Availability Zone
↳ `instanceState`	string	Instance state (e.g., running, stopped)
↳ `instanceStatus`	string	Instance status check (ok, impaired, initializing, insufficient-data, not-applicable)
↳ `systemStatus`	string	System status check (ok, impaired, initializing, insufficient-data, not-applicable)
↳ `attachedEbsStatus`	string	Attached EBS status check
↳ `events`	array	Scheduled events
↳ `code`	string	Event code (e.g., system-reboot, instance-retirement)
↳ `description`	string	Event description
↳ `notBefore`	string	Earliest start time (ISO 8601)
↳ `notAfter`	string	Latest end time (ISO 8601)

EC2 Start Instances

Start one or more stopped EC2 instances

Inputs and outputs

Input

Parameter	Type	Required	Description
`awsRegion`	string	Yes	AWS region (e.g., us-east-1)
`awsAccessKeyId`	string	Yes	AWS access key ID
`awsSecretAccessKey`	string	Yes	AWS secret access key
`instanceIds`	string	Yes	Comma-separated instance IDs to start

Output

Parameter	Type	Description
`instances`	array	State transition for each instance
↳ `instanceId`	string	Instance ID
↳ `currentState`	string	State after the request (e.g., pending, running)
↳ `previousState`	string	State before the request

EC2 Stop Instances

Stop one or more running EC2 instances

Inputs and outputs

Input

Parameter	Type	Required	Description
`awsRegion`	string	Yes	AWS region (e.g., us-east-1)
`awsAccessKeyId`	string	Yes	AWS access key ID
`awsSecretAccessKey`	string	Yes	AWS secret access key
`instanceIds`	string	Yes	Comma-separated instance IDs to stop
`hibernate`	boolean	No	Hibernate the instances instead of stopping them (hibernation must be enabled on the instance)
`force`	boolean	No	Force the instances to stop without flushing file system caches

Output

Parameter	Type	Description
`instances`	array	State transition for each instance
↳ `instanceId`	string	Instance ID
↳ `currentState`	string	State after the request (e.g., stopping, stopped)
↳ `previousState`	string	State before the request

EC2 Reboot Instances

Request a reboot of one or more EC2 instances

Inputs and outputs

Input

Parameter	Type	Required	Description
`awsRegion`	string	Yes	AWS region (e.g., us-east-1)
`awsAccessKeyId`	string	Yes	AWS access key ID
`awsSecretAccessKey`	string	Yes	AWS secret access key
`instanceIds`	string	Yes	Comma-separated instance IDs to reboot

Output

Parameter	Type	Description
`rebooted`	boolean	Whether the reboot request was accepted
`instanceIds`	array	Instance IDs that were sent the reboot request

EC2 Terminate Instances

Permanently terminate one or more EC2 instances

Inputs and outputs

Input

Parameter	Type	Required	Description
`awsRegion`	string	Yes	AWS region (e.g., us-east-1)
`awsAccessKeyId`	string	Yes	AWS access key ID
`awsSecretAccessKey`	string	Yes	AWS secret access key
`instanceIds`	string	Yes	Comma-separated instance IDs to terminate

Output

Parameter	Type	Description
`instances`	array	State transition for each instance
↳ `instanceId`	string	Instance ID
↳ `currentState`	string	State after the request (e.g., shutting-down, terminated)
↳ `previousState`	string	State before the request

EC2 Describe Addresses

List Elastic IP addresses and what they are associated with

Inputs and outputs

Input

Parameter	Type	Required	Description
`awsRegion`	string	Yes	AWS region (e.g., us-east-1)
`awsAccessKeyId`	string	Yes	AWS access key ID
`awsSecretAccessKey`	string	Yes	AWS secret access key
`publicIps`	string	No	Comma-separated Elastic IP addresses to describe
`allocationIds`	string	No	Comma-separated allocation IDs (e.g., eipalloc-0abc123)
`filters`	json	No	EC2 filters as a JSON array, e.g. [{"Name":"domain","Values":["vpc"]}]

Output

Parameter	Type	Description
`addresses`	array	Elastic IP addresses
↳ `tags`	json	Resource tags as key/value pairs
↳ `publicIp`	string	Elastic IP address
↳ `allocationId`	string	Allocation ID
↳ `associationId`	string	Association ID when associated
↳ `domain`	string	Address scope (vpc or standard)
↳ `instanceId`	string	Associated instance ID
↳ `networkInterfaceId`	string	Associated network interface ID
↳ `networkInterfaceOwnerId`	string	AWS account ID that owns the network interface
↳ `privateIpAddress`	string	Associated private IP address
↳ `publicIpv4Pool`	string	Public IPv4 pool the address came from
↳ `networkBorderGroup`	string	Network border group the address is advertised from
↳ `serviceManaged`	string	AWS service managing the address, if any (e.g., alb, nlb)

EC2 Allocate Address

Allocate a new Elastic IP address for use in a VPC

Inputs and outputs

Input

Parameter	Type	Required	Description
`awsRegion`	string	Yes	AWS region (e.g., us-east-1)
`awsAccessKeyId`	string	Yes	AWS access key ID
`awsSecretAccessKey`	string	Yes	AWS secret access key
`networkBorderGroup`	string	No	Network border group to allocate from (defaults to the region)
`publicIpv4Pool`	string	No	BYOIP address pool to allocate from (defaults to the Amazon pool)
`tags`	json	No	Tags to apply as a JSON object, e.g. {"Name":"web-eip"}

Output

Parameter	Type	Description
`allocationId`	string	Allocation ID of the new Elastic IP
`publicIp`	string	Allocated Elastic IP address
`domain`	string	Address scope (vpc)
`networkBorderGroup`	string	Network border group
`publicIpv4Pool`	string	Public IPv4 pool

EC2 Associate Address

Associate an Elastic IP address with an instance or network interface

Inputs and outputs

Input

Parameter	Type	Required	Description
`awsRegion`	string	Yes	AWS region (e.g., us-east-1)
`awsAccessKeyId`	string	Yes	AWS access key ID
`awsSecretAccessKey`	string	Yes	AWS secret access key
`allocationId`	string	Yes	Allocation ID of the Elastic IP (e.g., eipalloc-0abc123)
`instanceId`	string	No	Instance ID to associate with (provide this or networkInterfaceId)
`networkInterfaceId`	string	No	Network interface ID to associate with (provide this or instanceId)
`privateIpAddress`	string	No	Private IP address on the target to associate with
`allowReassociation`	boolean	No	Allow moving an Elastic IP that is already associated

Output

Parameter	Type	Description
`associationId`	string	ID of the new association

EC2 Disassociate Address

Disassociate an Elastic IP address from its instance or network interface

Inputs and outputs

Input

Parameter	Type	Required	Description
`awsRegion`	string	Yes	AWS region (e.g., us-east-1)
`awsAccessKeyId`	string	Yes	AWS access key ID
`awsSecretAccessKey`	string	Yes	AWS secret access key
`associationId`	string	Yes	Association ID of the Elastic IP (e.g., eipassoc-0abc123)

Output

Parameter	Type	Description
`disassociated`	boolean	Whether the address was disassociated
`associationId`	string	Association ID that was removed

EC2 Release Address

Release an Elastic IP address back to AWS

Inputs and outputs

Input

Parameter	Type	Required	Description
`awsRegion`	string	Yes	AWS region (e.g., us-east-1)
`awsAccessKeyId`	string	Yes	AWS access key ID
`awsSecretAccessKey`	string	Yes	AWS secret access key
`allocationId`	string	Yes	Allocation ID of the Elastic IP to release
`networkBorderGroup`	string	No	Network border group the address was allocated from

Output

Parameter	Type	Description
`released`	boolean	Whether the address was released
`allocationId`	string	Allocation ID that was released

EC2 Describe NAT Gateways

List NAT gateways with their state, subnet, and IP addresses

Inputs and outputs

Input

Parameter	Type	Required	Description
`awsRegion`	string	Yes	AWS region (e.g., us-east-1)
`awsAccessKeyId`	string	Yes	AWS access key ID
`awsSecretAccessKey`	string	Yes	AWS secret access key
`natGatewayIds`	string	No	Comma-separated NAT gateway IDs (e.g., nat-0abc123)
`filters`	json	No	EC2 filters as a JSON array, e.g. [{"Name":"vpc-id","Values":["vpc-0abc123"]}]
`maxResults`	number	No	Maximum results per page when no IDs are given (5-1000, default 100)
`nextToken`	string	No	Pagination token from a previous response

Output

Parameter	Type	Description
`nextToken`	string	Pagination token for the next page, or null when there are no more results
`natGateways`	array	NAT gateways
↳ `tags`	json	Resource tags as key/value pairs
↳ `natGatewayId`	string	NAT gateway ID
↳ `state`	string	State (pending, failed, available, deleting, deleted)
↳ `connectivityType`	string	Connectivity type (public or private)
↳ `vpcId`	string	VPC ID
↳ `subnetId`	string	Subnet ID
↳ `createTime`	string	Creation time (ISO 8601)
↳ `deleteTime`	string	Deletion time (ISO 8601)
↳ `failureCode`	string	Failure code when state is failed
↳ `failureMessage`	string	Failure message when state is failed
↳ `addresses`	array	IP addresses of the NAT gateway
↳ `allocationId`	string	Elastic IP allocation ID
↳ `networkInterfaceId`	string	Network interface ID
↳ `privateIp`	string	Private IP address
↳ `publicIp`	string	Elastic IP address
↳ `associationId`	string	Association ID
↳ `isPrimary`	boolean	Whether this is the primary address
↳ `status`	string	Address status

EC2 Describe Route Tables

List VPC route tables with their routes and subnet associations

Inputs and outputs

Input

Parameter	Type	Required	Description
`awsRegion`	string	Yes	AWS region (e.g., us-east-1)
`awsAccessKeyId`	string	Yes	AWS access key ID
`awsSecretAccessKey`	string	Yes	AWS secret access key
`routeTableIds`	string	No	Comma-separated route table IDs (e.g., rtb-0abc123)
`filters`	json	No	EC2 filters as a JSON array, e.g. [{"Name":"vpc-id","Values":["vpc-0abc123"]}]
`maxResults`	number	No	Maximum results per page when no IDs are given (5-100, default 100)
`nextToken`	string	No	Pagination token from a previous response

Output

Parameter	Type	Description
`nextToken`	string	Pagination token for the next page, or null when there are no more results
`routeTables`	array	Route tables
↳ `tags`	json	Resource tags as key/value pairs
↳ `routeTableId`	string	Route table ID
↳ `vpcId`	string	VPC ID
↳ `ownerId`	string	Owning AWS account ID
↳ `routes`	array	Routes in the table
↳ `destinationCidrBlock`	string	IPv4 destination CIDR
↳ `destinationIpv6CidrBlock`	string	IPv6 destination CIDR
↳ `destinationPrefixListId`	string	Destination prefix list ID
↳ `gatewayId`	string	Internet or virtual private gateway ID (local for VPC-local routes)
↳ `natGatewayId`	string	NAT gateway ID
↳ `transitGatewayId`	string	Transit gateway ID
↳ `vpcPeeringConnectionId`	string	VPC peering connection ID
↳ `networkInterfaceId`	string	Network interface ID
↳ `instanceId`	string	NAT instance ID
↳ `egressOnlyInternetGatewayId`	string	Egress-only internet gateway ID
↳ `state`	string	Route state (active or blackhole)
↳ `origin`	string	How the route was created
↳ `associations`	array	Subnet and gateway associations
↳ `associationId`	string	Association ID
↳ `main`	boolean	Whether this is the main route table for the VPC
↳ `subnetId`	string	Associated subnet ID
↳ `gatewayId`	string	Associated gateway ID
↳ `state`	string	Association state

EC2 Describe VPCs

List VPCs with their CIDR blocks and state

Inputs and outputs

Input

Parameter	Type	Required	Description
`awsRegion`	string	Yes	AWS region (e.g., us-east-1)
`awsAccessKeyId`	string	Yes	AWS access key ID
`awsSecretAccessKey`	string	Yes	AWS secret access key
`vpcIds`	string	No	Comma-separated VPC IDs (e.g., vpc-0abc123)
`filters`	json	No	EC2 filters as a JSON array, e.g. [{"Name":"is-default","Values":["false"]}]
`maxResults`	number	No	Maximum results per page when no IDs are given (5-1000, default 100)
`nextToken`	string	No	Pagination token from a previous response

Output

Parameter	Type	Description
`nextToken`	string	Pagination token for the next page, or null when there are no more results
`vpcs`	array	VPCs
↳ `tags`	json	Resource tags as key/value pairs
↳ `vpcId`	string	VPC ID
↳ `cidrBlock`	string	Primary IPv4 CIDR block
↳ `cidrBlocks`	array	All associated IPv4 CIDR blocks
↳ `ipv6CidrBlocks`	array	Associated IPv6 CIDR blocks
↳ `state`	string	State (pending or available)
↳ `isDefault`	boolean	Whether this is the default VPC
↳ `instanceTenancy`	string	Instance tenancy
↳ `dhcpOptionsId`	string	DHCP options set ID
↳ `ownerId`	string	Owning AWS account ID

EC2 Describe Subnets

List subnets with their CIDR, Availability Zone, and free IP count

Inputs and outputs

Input

Parameter	Type	Required	Description
`awsRegion`	string	Yes	AWS region (e.g., us-east-1)
`awsAccessKeyId`	string	Yes	AWS access key ID
`awsSecretAccessKey`	string	Yes	AWS secret access key
`subnetIds`	string	No	Comma-separated subnet IDs (e.g., subnet-0abc123)
`filters`	json	No	EC2 filters as a JSON array, e.g. [{"Name":"vpc-id","Values":["vpc-0abc123"]}]
`maxResults`	number	No	Maximum results per page when no IDs are given (5-1000, default 100)
`nextToken`	string	No	Pagination token from a previous response

Output

Parameter	Type	Description
`nextToken`	string	Pagination token for the next page, or null when there are no more results
`subnets`	array	Subnets
↳ `tags`	json	Resource tags as key/value pairs
↳ `subnetId`	string	Subnet ID
↳ `subnetArn`	string	Subnet ARN
↳ `vpcId`	string	VPC ID
↳ `cidrBlock`	string	IPv4 CIDR block
↳ `ipv6CidrBlocks`	array	Associated IPv6 CIDR blocks
↳ `availabilityZone`	string	Availability Zone
↳ `availabilityZoneId`	string	Availability Zone ID
↳ `availableIpAddressCount`	number	Number of unused private IPv4 addresses
↳ `state`	string	State (pending, available, unavailable)
↳ `defaultForAz`	boolean	Whether this is the default subnet for its Availability Zone
↳ `mapPublicIpOnLaunch`	boolean	Whether instances get a public IPv4 address on launch
↳ `ownerId`	string	Owning AWS account ID

EC2 Describe Security Groups

List security groups with their inbound and outbound rules

Inputs and outputs

Input

Parameter	Type	Required	Description
`awsRegion`	string	Yes	AWS region (e.g., us-east-1)
`awsAccessKeyId`	string	Yes	AWS access key ID
`awsSecretAccessKey`	string	Yes	AWS secret access key
`groupIds`	string	No	Comma-separated security group IDs (e.g., sg-0abc123)
`filters`	json	No	EC2 filters as a JSON array, e.g. [{"Name":"vpc-id","Values":["vpc-0abc123"]}]
`maxResults`	number	No	Maximum results per page when no IDs are given (5-1000, default 100)
`nextToken`	string	No	Pagination token from a previous response

Output

Parameter	Type	Description
`nextToken`	string	Pagination token for the next page, or null when there are no more results
`securityGroups`	array	Security groups
↳ `tags`	json	Resource tags as key/value pairs
↳ `groupId`	string	Security group ID
↳ `groupName`	string	Security group name
↳ `description`	string	Description
↳ `vpcId`	string	VPC ID
↳ `ownerId`	string	Owning AWS account ID
↳ `ingressRules`	array	Inbound rules
↳ `ipProtocol`	string	IP protocol (tcp, udp, icmp, or -1 for all)
↳ `fromPort`	number	Start of the port range
↳ `toPort`	number	End of the port range
↳ `ipv4Ranges`	array	IPv4 CIDR ranges
↳ `cidr`	string	IPv4 CIDR
↳ `description`	string	Rule description
↳ `ipv6Ranges`	array	IPv6 CIDR ranges
↳ `cidr`	string	IPv6 CIDR
↳ `description`	string	Rule description
↳ `referencedGroups`	array	Referenced security groups
↳ `groupId`	string	Security group ID
↳ `userId`	string	Owning AWS account ID
↳ `description`	string	Rule description
↳ `prefixListIds`	array	Referenced prefix list IDs
↳ `egressRules`	array	Outbound rules
↳ `ipProtocol`	string	IP protocol (tcp, udp, icmp, or -1 for all)
↳ `fromPort`	number	Start of the port range
↳ `toPort`	number	End of the port range
↳ `ipv4Ranges`	array	IPv4 CIDR ranges
↳ `cidr`	string	IPv4 CIDR
↳ `description`	string	Rule description
↳ `ipv6Ranges`	array	IPv6 CIDR ranges
↳ `cidr`	string	IPv6 CIDR
↳ `description`	string	Rule description
↳ `referencedGroups`	array	Referenced security groups
↳ `groupId`	string	Security group ID
↳ `userId`	string	Owning AWS account ID
↳ `description`	string	Rule description
↳ `prefixListIds`	array	Referenced prefix list IDs

EC2 Describe Internet Gateways

List internet gateways and the VPCs they are attached to

Inputs and outputs

Input

Parameter	Type	Required	Description
`awsRegion`	string	Yes	AWS region (e.g., us-east-1)
`awsAccessKeyId`	string	Yes	AWS access key ID
`awsSecretAccessKey`	string	Yes	AWS secret access key
`internetGatewayIds`	string	No	Comma-separated internet gateway IDs (e.g., igw-0abc123)
`filters`	json	No	EC2 filters as a JSON array, e.g. [{"Name":"attachment.vpc-id","Values":["vpc-0abc123"]}]
`maxResults`	number	No	Maximum results per page when no IDs are given (5-1000, default 100)
`nextToken`	string	No	Pagination token from a previous response

Output

Parameter	Type	Description
`nextToken`	string	Pagination token for the next page, or null when there are no more results
`internetGateways`	array	Internet gateways
↳ `tags`	json	Resource tags as key/value pairs
↳ `internetGatewayId`	string	Internet gateway ID
↳ `ownerId`	string	Owning AWS account ID
↳ `attachments`	array	VPC attachments
↳ `vpcId`	string	Attached VPC ID
↳ `state`	string	Attachment state

EC2 Describe Network Interfaces

List elastic network interfaces with their IPs, attachment, and security groups

Inputs and outputs

Input

Parameter	Type	Required	Description
`awsRegion`	string	Yes	AWS region (e.g., us-east-1)
`awsAccessKeyId`	string	Yes	AWS access key ID
`awsSecretAccessKey`	string	Yes	AWS secret access key
`networkInterfaceIds`	string	No	Comma-separated network interface IDs (e.g., eni-0abc123)
`filters`	json	No	EC2 filters as a JSON array, e.g. [{"Name":"vpc-id","Values":["vpc-0abc123"]}]
`maxResults`	number	No	Maximum results per page when no IDs are given (5-1000, default 100)
`nextToken`	string	No	Pagination token from a previous response

Output

Parameter	Type	Description
`nextToken`	string	Pagination token for the next page, or null when there are no more results
`networkInterfaces`	array	Network interfaces
↳ `tags`	json	Resource tags as key/value pairs
↳ `networkInterfaceId`	string	Network interface ID
↳ `interfaceType`	string	Interface type (e.g., interface, nat_gateway, lambda)
↳ `status`	string	Status (available, in-use, attaching, detaching)
↳ `description`	string	Description
↳ `vpcId`	string	VPC ID
↳ `subnetId`	string	Subnet ID
↳ `availabilityZone`	string	Availability Zone
↳ `privateIpAddress`	string	Primary private IPv4 address
↳ `privateIpAddresses`	array	All private IPv4 addresses
↳ `publicIp`	string	Associated public IPv4 address
↳ `macAddress`	string	MAC address
↳ `requesterManaged`	boolean	Whether an AWS service manages the interface
↳ `attachment`	object	Instance attachment, if attached
↳ `attachmentId`	string	Attachment ID
↳ `instanceId`	string	Attached instance ID
↳ `deviceIndex`	number	Device index on the instance
↳ `status`	string	Attachment status
↳ `deleteOnTermination`	boolean	Whether the interface is deleted when the instance terminates
↳ `securityGroups`	array	Attached security groups
↳ `groupId`	string	Security group ID
↳ `groupName`	string	Security group name

EC2 Describe Volumes

List EBS volumes with their size, type, state, and attachments

Inputs and outputs

Input

Parameter	Type	Required	Description
`awsRegion`	string	Yes	AWS region (e.g., us-east-1)
`awsAccessKeyId`	string	Yes	AWS access key ID
`awsSecretAccessKey`	string	Yes	AWS secret access key
`volumeIds`	string	No	Comma-separated volume IDs (e.g., vol-0abc123)
`filters`	json	No	EC2 filters as a JSON array, e.g. [{"Name":"status","Values":["available"]}]
`maxResults`	number	No	Maximum results per page when no IDs are given (5-1000, default 100)
`nextToken`	string	No	Pagination token from a previous response

Output

Parameter	Type	Description
`nextToken`	string	Pagination token for the next page, or null when there are no more results
`volumes`	array	EBS volumes
↳ `tags`	json	Resource tags as key/value pairs
↳ `volumeId`	string	Volume ID
↳ `volumeType`	string	Volume type (gp2, gp3, io1, io2, st1, sc1, standard)
↳ `size`	number	Size in GiB
↳ `state`	string	State (creating, available, in-use, deleting, deleted, error)
↳ `availabilityZone`	string	Availability Zone
↳ `iops`	number	Provisioned IOPS
↳ `throughput`	number	Throughput in MiB/s (gp3)
↳ `encrypted`	boolean	Whether the volume is encrypted
↳ `kmsKeyId`	string	KMS key ARN used for encryption
↳ `snapshotId`	string	Snapshot the volume was created from
↳ `createTime`	string	Creation time (ISO 8601)
↳ `multiAttachEnabled`	boolean	Whether Multi-Attach is enabled
↳ `attachments`	array	Instance attachments
↳ `instanceId`	string	Attached instance ID
↳ `device`	string	Device name (e.g., /dev/xvda)
↳ `state`	string	Attachment state
↳ `attachTime`	string	Attach time (ISO 8601)
↳ `deleteOnTermination`	boolean	Whether the volume is deleted when the instance terminates

EC2 Describe Snapshots

List EBS snapshots owned by the account (or by the owners you specify)

Inputs and outputs

Input

Parameter	Type	Required	Description
`awsRegion`	string	Yes	AWS region (e.g., us-east-1)
`awsAccessKeyId`	string	Yes	AWS access key ID
`awsSecretAccessKey`	string	Yes	AWS secret access key
`snapshotIds`	string	No	Comma-separated snapshot IDs (e.g., snap-0abc123)
`ownerIds`	string	No	Comma-separated owners: AWS account IDs, self, or amazon (defaults to self)
`filters`	json	No	EC2 filters as a JSON array, e.g. [{"Name":"volume-id","Values":["vol-0abc123"]}]
`maxResults`	number	No	Maximum results per page when no IDs are given (5-1000, default 100)
`nextToken`	string	No	Pagination token from a previous response

Output

Parameter	Type	Description
`nextToken`	string	Pagination token for the next page, or null when there are no more results
`snapshots`	array	EBS snapshots
↳ `tags`	json	Resource tags as key/value pairs
↳ `snapshotId`	string	Snapshot ID
↳ `volumeId`	string	Source volume ID
↳ `volumeSize`	number	Source volume size in GiB
↳ `state`	string	State (pending, completed, error, recoverable, recovering)
↳ `progress`	string	Completion progress (e.g., 100%)
↳ `startTime`	string	Start time (ISO 8601)
↳ `description`	string	Description
↳ `ownerId`	string	Owning AWS account ID
↳ `encrypted`	boolean	Whether the snapshot is encrypted
↳ `kmsKeyId`	string	KMS key ARN used for encryption
↳ `storageTier`	string	Storage tier (standard or archive)

EC2 Create Snapshot

Create a point-in-time snapshot of an EBS volume

Inputs and outputs

Input

Parameter	Type	Required	Description
`awsRegion`	string	Yes	AWS region (e.g., us-east-1)
`awsAccessKeyId`	string	Yes	AWS access key ID
`awsSecretAccessKey`	string	Yes	AWS secret access key
`volumeId`	string	Yes	ID of the EBS volume to snapshot (e.g., vol-0abc123)
`description`	string	No	Description for the snapshot
`tags`	json	No	Tags to apply as a JSON object, e.g. {"Name":"nightly-backup"}

Output

Parameter	Type	Description
`tags`	json	Resource tags as key/value pairs
`snapshotId`	string	ID of the new snapshot
`volumeId`	string	Source volume ID
`volumeSize`	number	Source volume size in GiB
`state`	string	Snapshot state (pending until complete)
`startTime`	string	Start time (ISO 8601)
`description`	string	Description
`encrypted`	boolean	Whether the snapshot is encrypted
`ownerId`	string	Owning AWS account ID

EC2 Create Tags

Add or overwrite tags on one or more EC2 resources

Inputs and outputs

Input

Parameter	Type	Required	Description
`awsRegion`	string	Yes	AWS region (e.g., us-east-1)
`awsAccessKeyId`	string	Yes	AWS access key ID
`awsSecretAccessKey`	string	Yes	AWS secret access key
`resourceIds`	string	Yes	Comma-separated resource IDs to tag (e.g., i-0abc123,vol-0def456)
`tags`	json	Yes	Tags as a JSON object, e.g. {"Environment":"prod","Owner":"platform"}

Output

Parameter	Type	Description
`tags`	json	Resource tags as key/value pairs
`resourceIds`	array	Resource IDs that were tagged

EC2 Delete Tags

Remove tags from one or more EC2 resources

Inputs and outputs

Input

Parameter	Type	Required	Description
`awsRegion`	string	Yes	AWS region (e.g., us-east-1)
`awsAccessKeyId`	string	Yes	AWS access key ID
`awsSecretAccessKey`	string	Yes	AWS secret access key
`resourceIds`	string	Yes	Comma-separated resource IDs to untag
`tagKeys`	string	Yes	Comma-separated tag keys to remove

Output

Parameter	Type	Description
`resourceIds`	array	Resource IDs that were untagged
`tagKeys`	array	Tag keys that were removed

EC2 Describe Regions

List AWS Regions available to the account

Inputs and outputs

Input

Parameter	Type	Required	Description
`awsRegion`	string	Yes	AWS region (e.g., us-east-1)
`awsAccessKeyId`	string	Yes	AWS access key ID
`awsSecretAccessKey`	string	Yes	AWS secret access key
`regionNames`	string	No	Comma-separated region names to describe
`allRegions`	boolean	No	Include Regions that are not enabled for the account
`filters`	json	No	EC2 filters as a JSON array, e.g. [{"Name":"opt-in-status","Values":["opted-in"]}]

Output

Parameter	Type	Description
`regions`	array	AWS Regions
↳ `regionName`	string	Region name (e.g., us-east-1)
↳ `endpoint`	string	EC2 endpoint for the Region
↳ `optInStatus`	string	Opt-in status (opt-in-not-required, opted-in, not-opted-in)

EC2 Describe Availability Zones

List Availability Zones, Local Zones, and Wavelength Zones in the region

Inputs and outputs

Input

Parameter	Type	Required	Description
`awsRegion`	string	Yes	AWS region (e.g., us-east-1)
`awsAccessKeyId`	string	Yes	AWS access key ID
`awsSecretAccessKey`	string	Yes	AWS secret access key
`zoneNames`	string	No	Comma-separated zone names (e.g., us-east-1a)
`allAvailabilityZones`	boolean	No	Include zones that are not opted in
`filters`	json	No	EC2 filters as a JSON array, e.g. [{"Name":"state","Values":["available"]}]

Output

Parameter	Type	Description
`availabilityZones`	array	Zones
↳ `zoneName`	string	Zone name (e.g., us-east-1a)
↳ `zoneId`	string	Zone ID (e.g., use1-az1)
↳ `zoneType`	string	Zone type (availability-zone, local-zone, wavelength-zone)
↳ `state`	string	Zone state
↳ `regionName`	string	Region name
↳ `groupName`	string	Zone group name
↳ `networkBorderGroup`	string	Network border group
↳ `optInStatus`	string	Opt-in status

EC2 Authorize Security Group Ingress

Add an inbound rule to a security group

Inputs and outputs

Input

Parameter	Type	Required	Description
`awsRegion`	string	Yes	AWS region (e.g., us-east-1)
`awsAccessKeyId`	string	Yes	AWS access key ID
`awsSecretAccessKey`	string	Yes	AWS secret access key
`groupId`	string	Yes	Security group ID (e.g., sg-0abc123)
`ipProtocol`	string	Yes	IP protocol: tcp, udp, icmp, icmpv6, or -1 for all traffic
`fromPort`	number	No	Start of the port range (ICMP type for icmp; omit for -1)
`toPort`	number	No	End of the port range (ICMP code for icmp; omit for -1)
`cidrIp`	string	No	IPv4 CIDR source (e.g., 203.0.113.0/24). Provide exactly one source
`cidrIpv6`	string	No	IPv6 CIDR source (e.g., 2001:db8::/32). Provide exactly one source
`sourceGroupId`	string	No	Source security group ID. Provide exactly one source
`description`	string	No	Description for the rule

Output

Parameter	Type	Description
`authorized`	boolean	Whether the rule was added
`securityGroupRules`	array	Rules that were added
↳ `securityGroupRuleId`	string	Security group rule ID
↳ `groupId`	string	Security group ID
↳ `ipProtocol`	string	IP protocol
↳ `fromPort`	number	Start of the port range
↳ `toPort`	number	End of the port range
↳ `cidrIpv4`	string	IPv4 CIDR source
↳ `cidrIpv6`	string	IPv6 CIDR source
↳ `referencedGroupId`	string	Source security group ID
↳ `description`	string	Rule description

EC2 Revoke Security Group Ingress

Remove inbound rules from a security group by rule ID or by matching protocol, ports, and source

Inputs and outputs

Input

Parameter	Type	Required	Description
`awsRegion`	string	Yes	AWS region (e.g., us-east-1)
`awsAccessKeyId`	string	Yes	AWS access key ID
`awsSecretAccessKey`	string	Yes	AWS secret access key
`groupId`	string	Yes	Security group ID (e.g., sg-0abc123)
`ipProtocol`	string	No	IP protocol: tcp, udp, icmp, icmpv6, or -1 for all traffic
`fromPort`	number	No	Start of the port range (ICMP type for icmp; omit for -1)
`toPort`	number	No	End of the port range (ICMP code for icmp; omit for -1)
`cidrIp`	string	No	IPv4 CIDR source (e.g., 203.0.113.0/24). Provide exactly one source
`cidrIpv6`	string	No	IPv6 CIDR source (e.g., 2001:db8::/32). Provide exactly one source
`sourceGroupId`	string	No	Source security group ID. Provide exactly one source
`securityGroupRuleIds`	string	No	Comma-separated security group rule IDs (e.g., sgr-0abc123). Use instead of protocol, ports, and source

Output

Parameter	Type	Description
`revoked`	boolean	Whether the request succeeded
`revokedRules`	array	Rules that were removed
↳ `securityGroupRuleId`	string	Security group rule ID
↳ `ipProtocol`	string	IP protocol
↳ `fromPort`	number	Start of the port range
↳ `toPort`	number	End of the port range
↳ `cidrIpv4`	string	IPv4 CIDR source
↳ `cidrIpv6`	string	IPv6 CIDR source
↳ `referencedGroupId`	string	Source security group ID
↳ `description`	string	Rule description
`unmatchedRuleCount`	number	Number of requested rules that did not match an existing rule

EC2 Describe Network ACLs

List network ACLs with their inbound and outbound rules and subnet associations

Inputs and outputs

Input

Parameter	Type	Required	Description
`awsRegion`	string	Yes	AWS region (e.g., us-east-1)
`awsAccessKeyId`	string	Yes	AWS access key ID
`awsSecretAccessKey`	string	Yes	AWS secret access key
`networkAclIds`	string	No	Comma-separated network ACL IDs (e.g., acl-0abc123)
`filters`	json	No	EC2 filters as a JSON array, e.g. [{"Name":"vpc-id","Values":["vpc-0abc123"]}]
`maxResults`	number	No	Maximum results per page when no IDs are given (5-1000, default 100)
`nextToken`	string	No	Pagination token from a previous response

Output

Parameter	Type	Description
`nextToken`	string	Pagination token for the next page, or null when there are no more results
`networkAcls`	array	Network ACLs
↳ `tags`	json	Resource tags as key/value pairs
↳ `networkAclId`	string	Network ACL ID
↳ `vpcId`	string	VPC ID
↳ `isDefault`	boolean	Whether this is the default ACL for the VPC
↳ `ownerId`	string	Owning AWS account ID
↳ `entries`	array	Rules, evaluated in ascending rule number
↳ `ruleNumber`	number	Rule number
↳ `egress`	boolean	Whether the rule applies to outbound traffic
↳ `ruleAction`	string	allow or deny
↳ `protocol`	string	Protocol number (-1 for all, 6 for TCP, 17 for UDP)
↳ `cidrBlock`	string	IPv4 CIDR
↳ `ipv6CidrBlock`	string	IPv6 CIDR
↳ `fromPort`	number	Start of the port range
↳ `toPort`	number	End of the port range
↳ `icmpType`	number	ICMP type
↳ `icmpCode`	number	ICMP code
↳ `associations`	array	Subnet associations
↳ `associationId`	string	Association ID
↳ `subnetId`	string	Subnet ID

EC2 Describe VPC Endpoints

List VPC endpoints with their service, type, state, and network placement

Inputs and outputs

Input

Parameter	Type	Required	Description
`awsRegion`	string	Yes	AWS region (e.g., us-east-1)
`awsAccessKeyId`	string	Yes	AWS access key ID
`awsSecretAccessKey`	string	Yes	AWS secret access key
`vpcEndpointIds`	string	No	Comma-separated VPC endpoint IDs (e.g., vpce-0abc123)
`filters`	json	No	EC2 filters as a JSON array, e.g. [{"Name":"vpc-id","Values":["vpc-0abc123"]}]
`maxResults`	number	No	Maximum results per page when no IDs are given (5-1000, default 100)
`nextToken`	string	No	Pagination token from a previous response

Output

Parameter	Type	Description
`nextToken`	string	Pagination token for the next page, or null when there are no more results
`vpcEndpoints`	array	VPC endpoints
↳ `tags`	json	Resource tags as key/value pairs
↳ `vpcEndpointId`	string	VPC endpoint ID
↳ `vpcEndpointType`	string	Endpoint type (Interface, Gateway, GatewayLoadBalancer, Resource, ServiceNetwork)
↳ `vpcId`	string	VPC ID
↳ `serviceName`	string	Service name (e.g., com.amazonaws.us-east-1.s3)
↳ `state`	string	Endpoint state
↳ `privateDnsEnabled`	boolean	Whether private DNS is enabled
↳ `routeTableIds`	array	Associated route table IDs (gateway endpoints)
↳ `subnetIds`	array	Subnet IDs (interface endpoints)
↳ `networkInterfaceIds`	array	Endpoint network interface IDs
↳ `securityGroupIds`	array	Attached security group IDs
↳ `dnsNames`	array	DNS names for the endpoint
↳ `creationTimestamp`	string	Creation time (ISO 8601)
↳ `ownerId`	string	Owning AWS account ID

EC2 Describe VPC Peering Connections

List VPC peering connections with their status and both VPCs

Inputs and outputs

Input

Parameter	Type	Required	Description
`awsRegion`	string	Yes	AWS region (e.g., us-east-1)
`awsAccessKeyId`	string	Yes	AWS access key ID
`awsSecretAccessKey`	string	Yes	AWS secret access key
`vpcPeeringConnectionIds`	string	No	Comma-separated VPC peering connection IDs (e.g., pcx-0abc123)
`filters`	json	No	EC2 filters as a JSON array, e.g. [{"Name":"status-code","Values":["active"]}]
`maxResults`	number	No	Maximum results per page when no IDs are given (5-1000, default 100)
`nextToken`	string	No	Pagination token from a previous response

Output

Parameter	Type	Description
`nextToken`	string	Pagination token for the next page, or null when there are no more results
`vpcPeeringConnections`	array	VPC peering connections
↳ `tags`	json	Resource tags as key/value pairs
↳ `vpcPeeringConnectionId`	string	VPC peering connection ID
↳ `status`	string	Status code (e.g., pending-acceptance, active, rejected, deleted)
↳ `statusMessage`	string	Status message
↳ `requesterVpc`	object	Requester VPC
↳ `vpcId`	string	VPC ID
↳ `ownerId`	string	Owning AWS account ID
↳ `region`	string	Region
↳ `cidrBlock`	string	IPv4 CIDR block
↳ `accepterVpc`	object	Accepter VPC
↳ `vpcId`	string	VPC ID
↳ `ownerId`	string	Owning AWS account ID
↳ `region`	string	Region
↳ `cidrBlock`	string	IPv4 CIDR block
↳ `expirationTime`	string	Time an unaccepted request expires (ISO 8601)

EC2 Delete Volume

Permanently delete an EBS volume that is not attached to an instance

Inputs and outputs

Input

Parameter	Type	Required	Description
`awsRegion`	string	Yes	AWS region (e.g., us-east-1)
`awsAccessKeyId`	string	Yes	AWS access key ID
`awsSecretAccessKey`	string	Yes	AWS secret access key
`volumeId`	string	Yes	ID of the EBS volume to delete (e.g., vol-0abc123)

Output

Parameter	Type	Description
`deleted`	boolean	Whether the volume deletion was accepted
`volumeId`	string	Volume ID that was deleted

EC2 Delete Snapshot

Permanently delete an EBS snapshot

Inputs and outputs

Input

Parameter	Type	Required	Description
`awsRegion`	string	Yes	AWS region (e.g., us-east-1)
`awsAccessKeyId`	string	Yes	AWS access key ID
`awsSecretAccessKey`	string	Yes	AWS secret access key
`snapshotId`	string	Yes	ID of the EBS snapshot to delete (e.g., snap-0abc123)

Output

Parameter	Type	Description
`deleted`	boolean	Whether the snapshot was deleted
`snapshotId`	string	Snapshot ID that was deleted

EC2 Describe Images

List AMIs owned by the account (or by the owners you specify)

Inputs and outputs

Input

Parameter	Type	Required	Description
`awsRegion`	string	Yes	AWS region (e.g., us-east-1)
`awsAccessKeyId`	string	Yes	AWS access key ID
`awsSecretAccessKey`	string	Yes	AWS secret access key
`imageIds`	string	No	Comma-separated AMI IDs (e.g., ami-0abc123)
`owners`	string	No	Comma-separated owners: AWS account IDs, self, amazon, or aws-marketplace (defaults to self)
`filters`	json	No	EC2 filters as a JSON array, e.g. [{"Name":"name","Values":["my-app-*"]}]
`maxResults`	number	No	Maximum results per page when no IDs are given (5-1000, default 100)
`nextToken`	string	No	Pagination token from a previous response

Output

Parameter	Type	Description
`nextToken`	string	Pagination token for the next page, or null when there are no more results
`images`	array	AMIs
↳ `tags`	json	Resource tags as key/value pairs
↳ `imageId`	string	AMI ID
↳ `name`	string	AMI name
↳ `description`	string	Description
↳ `state`	string	State (pending, available, invalid, deregistered, transient, failed, error, disabled)
↳ `ownerId`	string	Owning AWS account ID
↳ `ownerAlias`	string	Owner alias (e.g., amazon)
↳ `public`	boolean	Whether the AMI is public
↳ `architecture`	string	CPU architecture
↳ `platformDetails`	string	Platform details (e.g., Linux/UNIX)
↳ `rootDeviceType`	string	Root device type (ebs or instance-store)
↳ `virtualizationType`	string	Virtualization type (hvm or paravirtual)
↳ `creationDate`	string	Creation date (ISO 8601)
↳ `deprecationTime`	string	Deprecation time (ISO 8601)
↳ `lastLaunchedTime`	string	Last time an instance was launched from the AMI (ISO 8601)

EC2 Describe Key Pairs

List EC2 key pairs with their type, fingerprint, and creation time

Inputs and outputs

Input

Parameter	Type	Required	Description
`awsRegion`	string	Yes	AWS region (e.g., us-east-1)
`awsAccessKeyId`	string	Yes	AWS access key ID
`awsSecretAccessKey`	string	Yes	AWS secret access key
`keyNames`	string	No	Comma-separated key pair names
`keyPairIds`	string	No	Comma-separated key pair IDs (e.g., key-0abc123)
`filters`	json	No	EC2 filters as a JSON array, e.g. [{"Name":"key-name","Values":["deploy-*"]}]

Output

Parameter	Type	Description
`keyPairs`	array	Key pairs
↳ `tags`	json	Resource tags as key/value pairs
↳ `keyPairId`	string	Key pair ID
↳ `keyName`	string	Key pair name
↳ `keyType`	string	Key type (rsa or ed25519)
↳ `keyFingerprint`	string	Key fingerprint
↳ `createTime`	string	Creation time (ISO 8601)