检查停止的 AWS EC2 实例是否将获得带有 boto3 的 Public IP

Question

If an EC2 instance has been set up to retrieve a Public IP (not Elastic IP) and it is currently stopped, what can I look at to see that it will get a Public IP when it starts up? Let's assume the su.net it is on is not set up give Public IPs to all instances. When the instance is running I can see the public IP information when I retrieve the instance with client.describe_instances() but I don't see anythihng when it is stopped. Thanks.

Answer 1

After looking through lots of documentations I came to the conclusion that it can't be done reliably with the information that is exposed through the APIs. The answer by John covers important details on the factors that determine if an EC2 instance will be assigned a public IP on first boot.

Given that information it's possible to determine if a newly launched EC2 instance will get a public IP, which is essentially controlled by the AssociatePublicIpAddress parameter. This can be set explicitly while starting an instance (see doc1 - Example 5 , doc2 ) and will have a default value that depends on the su.net the instance is launched in.

If the instance is launched in a su.net that has MapPublicIPOnLaunch set to true, this defaults to true and if MapPublicIPOnLaunch is set to false, it defaults to false. However, you can overwrite this default.

The information if a public IP is supposed to be associated is retained on the ENI , if the docs are to be believed (emphasis mine).

When you create a.network interface, it inherits the public IPv4 addressing attribute from the su.net. If you later modify the public IPv4 addressing attribute of the su.net, the.network interface keeps the setting that was in effect when it was created. If you launch an instance and specify an existing.network interface as the primary.network interface, the public IPv4 address attribute is determined by this.network interface.

Unfortunately it doesn't seem like any API exposes the value of this internal Flag - neither the DescribeInstances nor the DescribeNetworkInterfaces API-call include it in the response.

As a result of that, you can make an educated guess based on the su.net the instance lives in, but however educated, it is still a guess, because this only works, if the default for AssociatePublicIpAddress hasn't been changed. The only way to determine that reliably is to turn the instance on, to a DescribeInstances on it and check if it has received a public IP.

Answer 2

Public IP addresses can be assigned to instances in 3 ways:

• An Elastic IP address is assigned to the instance, or
• The instance is launched with AssociatePublicIpAddress set to True on an ENI, or
• The su.net has MapPublicIpOnLaunch set to True

To know whether the su.net will automatically attach a public IP address, call DescribeSu.nets() and check the MapPublicIpOnLaunch attribute.