Chapter 7. Configuring a RHEL instance on Amazon Web Services with AMD SEV SNP

Procedure

1. Check if SEV-SNP is enabled for the RHEL instance:

   $ aws ec2 describe-instances --instance-ids <example_instance_id> \
   --region <example_region>

   ...
   "CpuOptions": {
   "CoreCount": 2,
   "ThreadsPerCore": 2,
   "AmdSevSnp": "enabled"
   },
   ...

2. If SEV-SNP is not enabled, get ID of a RHEL Amazon Machine Image (AMI):

   $ aws ec2 describe-images \
   --owners 309956199498 \
   --query 'sort_by(Images, &Name)[].[CreationDate,Name,ImageId]' \*
   --filters "Name=name,Values=RHEL-10" \*
   --region us-east-1 \
   --output table

   Note

   Do not modify the command option --owners 309956199498. This is the account ID for displaying Red Hat images. If you need to list images for AWS GovCloud, use --region us-gov-west-1 and --owners 219670896067.

3. Launch a RHEL instance with SEV-SNP enabled:

   $ aws ec2 run-instances \
   --image-id <example-rhel-10-ami-id> \
   --instance-type m6a.4xlarge \
   --key-name <example_key_pair_name> \
   --subnet-id <example_subnet_id> \
   --cpu-options AmdSevSnp=enabled