Chapter 13: Amazon EBS (Elastic Block Store)
13.8 EBS best practices
- Use gp3 by default; convert old gp2 volumes to gp3.
- Keep data on separate volumes from the OS; use UUID +
nofailin fstab. - Encrypt volumes (set EBS encryption by default in EC2 settings for the region).
- Automate snapshots with Data Lifecycle Manager / AWS Backup, and test restores.
- Monitor free space (
df -h) and CloudWatch metrics; grow before the disk is full. - Delete unattached volumes and old snapshots to save money.
- Check Delete on termination settings: root volumes default to deleted, extra volumes default to kept.