🛡️ AWS EC2 Auto Scaling Group Capacity Rebalancing is not enabled🟢

• Contextual name: 🛡️ Auto Scaling Group Capacity Rebalancing is not enabled🟢
• ID: /ce/ca/aws/autoscaling/group-capacity-rebalancing
• Tags:
  • 🟢 Policy with categories
  • 🟢 Policy with type
  • 🟢 Production policy
• Policy Type: COMPLIANCE_POLICY
• Policy Categories: RELIABILITY

Logic

• 🧠 prod.logic.yaml🟢
  • 📗 AWS EC2 Auto Scaling Group
  • 🔌 AWS EC2 Auto Scaling Group - object.extracts.yaml
  • 🧪 test-data.json

Description

Open File

Description

This policy checks that AWS EC2 Auto Scaling Groups that use a mixed instances launch template but do not have Capacity Rebalancing enabled.

Capacity Rebalancing helps you maintain application availability by proactively launching a new Spot Instance to replace one that is at an increased risk of interruption.

Rationale

Spot Instances offer a cost-effective way to run workloads, however, they can be interrupted when EC2 reclaims capacity. Enabling Capacity Rebalancing helps minimize the impact of such interruptions. When a Spot Instance receives a rebalance recommendation, the Auto Scaling group proactively launches a replacement instance, allowing your application to maintain stability and performance before the original instance is terminated.

Impact

If Capacity Rebalancing is not enabled, your application may experience reduced availability or performance degradation when Spot Instances are interrupted and replacements cannot be provisioned promptly.

Audit

This policy flags an AWS EC2 Auto Scaling Group as INCOMPLIANT if if it uses a mixed instances launch template and Capacity Rebalancing is not set to Enable.

... see more

Remediation

Open File

Remediation

Enable Capacity Rebalancing

Enable Capacity Rebalancing for the Auto Scaling Group using the update-auto-scaling-group command:

From Command Line

aws autoscaling update-auto-scaling-group \
    --auto-scaling-group-name {{asg-name}} \
    --capacity-rebalance

policy.yaml

Open File

Linked Framework Sections

Section	Sub Sections	Internal Rules	Policies	Flags	Compliance
💼 AWS Well-Architected → 💼 PERF04-BP04 Use load balancing to distribute traffic across multiple resources			3		no data
💼 AWS Well-Architected → 💼 REL06-BP04 Automate responses (Real-time processing and alarming)			1		no data
💼 AWS Well-Architected → 💼 REL07-BP02 Obtain resources upon detection of impairment to a workload			1		no data
💼 AWS Well-Architected → 💼 REL11-BP03 Automate healing on all layers			1		no data
💼 AWS Well-Architected → 💼 REL13-BP05 Automate recovery			2		no data
💼 AWS Well-Architected → 💼 SUS02-BP01 Scale workload infrastructure dynamically			1		no data
💼 Cloudaware Framework → 💼 System Configuration			38		no data