# Prepare EC2 stop-start changes around ephemeral storage and public addresses

> A stopped instance persists, but every runtime dependency may not survive the restart.

- Canonical URL: https://update.dsesecurity.com/updates/prepare-ec2-stop-start-changes-around-ephemeral-storage-and-public-addresses/
- Publisher: Detection Systems & Engineering (DSE Security)
- Author: DSE Security Editorial Team
- Published: 2026-10-20T18:13:52+00:00
- Modified: 2026-10-20T18:34:29+00:00
- Last reviewed by DSE: 2026-10-20
- Resource type: Guide
- DSE priority: Information
- Topics: Cybersecurity, IT
- Reading time: 2 minutes

## What you need to know

A stopped instance persists, but every runtime dependency may not survive the restart.

## Potentially affected

This applies to an EC2 stop/start maintenance operation, not hibernation or termination.

## DSE recommendation

DSE recommends identifying instance-store use, address dependencies and application shutdown requirements before scheduling maintenance.

## Article

A stopped instance persists, but every runtime dependency may not survive the restart.

## Source facts

AWS supports stop/start for EBS-root instances. Starting typically moves the instance to another host and assigns a new public IPv4 address. Stopping erases data on instance-store volumes. AWS recommends copying required instance-store data to persistent storage before the stop and warns that bypassing graceful shutdown risks data integrity.

Source: [AWS Documentation](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Stop_Start.html).

## Applicability

This applies to an EC2 stop/start maintenance operation, not hibernation or termination.

## DSE recommendation

DSE recommends identifying instance-store use, address dependencies and application shutdown requirements before scheduling maintenance. Review DNS, allowlists and remote-management access that may depend on the current public address. Preserve required runtime data and confirm the restart procedure with the application owner. Assign someone to validate service recovery, and keep a route to the instance that does not assume the old address remains valid. Record the approved maintenance window and rollback options before stopping the workload. Require the maintenance owner to list the service checks needed after startup, including external callers and stored data. Capture a harmless before-and-after inventory in rehearsal, and make unresolved address or storage dependencies a reason to revise the maintenance plan.

## Verification

Proposed verification: rehearse on a representative test instance, compare storage and network identities before and after, and validate the application’s start sequence. Confirm persistent data remains accessible and intentionally ephemeral data is handled correctly before approving the same operation in production.

## Official reference

[AWS Documentation](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Stop_Start.html). Reviewed October 20, 2026.

## Primary reference

- Name: AWS Documentation
- Authority: docs.aws.amazon.com
- URL: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Stop_Start.html
- Source publication date: Not stated by the source

## Citation and use

Preferred citation: “Prepare EC2 stop-start changes around ephemeral storage and public addresses,” DSE Security, https://update.dsesecurity.com/updates/prepare-ec2-stop-start-changes-around-ephemeral-storage-and-public-addresses/
Publishing principles: https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/
Usage and citation policy: https://update.dsesecurity.com/usage/
Copyright © 2026 Detection Systems & Engineering. All rights reserved.