EC2

AWS integration · 17 node(s).

00Overview

Elastic Compute Cloud operations

Every field below is exactly what you see in the Flomation editor. Fields marked ● live picker let you choose from a list pulled live from your account — no IDs to look up.

01Connecting EC2

EC2 signs in with a Aws account you connect to Flomation — there is no API key or secret to paste. Connect the account once and every EC2 node picks it up automatically. Two optional fields let you steer it:

Field	Type		Details
Authentication	`string`	Required	Access Keys, Assume Role (cross-account), Managed Role (Credential)
AWS Access Key	`secret`	Required
AWS Secret Key	`secret`	Required
Session Token (optional)	`secret`
AWS Role Credential	`credential`	Required
Protocol	`string`	Required	TCP, UDP, ICMP, All

Connect the Aws account to your Flomation user once — the same grant covers every Aws node, so you do not repeat it per flow. The optional Aws OAuth Credential field never shows a token: it references a managed credential (e.g. ${credentials.GOOGLE_DRIVE}), not an environment secret. Leave both fields blank and the node just uses your connected account.

02Authorize

AWS EC2 Authorize Security Group Ingress

aws/ec2/authorize_security_group_ingress · Action

Add an inbound rule to a security group (protocol, port range and CIDR).

Field	Type		Details
Region	`string`	Required	eu-west-2
Role ARN to Assume	`string`	Required	arn:aws:iam::<your-account>:role/FlomationAccess
Assume Role External ID (optional)	`string`		Must match the External ID in the role's trust policy
Group ID	`string`	Required	sg-0abc123
From Port	`integer`		e.g. 443
To Port	`integer`		e.g. 443
CIDR	`string`	Required	0.0.0.0/0
Rule Description	`string`		Optional

Returns: tool_result, group_id

03Create

AWS EC2 Create Security Group

aws/ec2/create_security_group · Action

Create a security group in a VPC. Rules are added separately via authorize ingress.

Field	Type		Details
Region	`string`	Required	eu-west-2
Role ARN to Assume	`string`	Required	arn:aws:iam::<your-account>:role/FlomationAccess
Assume Role External ID (optional)	`string`		Must match the External ID in the role's trust policy
Group Name	`string`	Required	web-sg
Description	`string`	Required	Allows web traffic
VPC ID	`string`		vpc-0abc (optional; default VPC if blank)

Returns: tool_result, group_id

AWS EC2 Create Snapshot

aws/ec2/create_snapshot · Action

Create a point-in-time snapshot of an EBS volume.

Field	Type		Details
Region	`string`	Required	eu-west-2
Role ARN to Assume	`string`	Required	arn:aws:iam::<your-account>:role/FlomationAccess
Assume Role External ID (optional)	`string`		Must match the External ID in the role's trust policy
Volume ID	`string`	Required	vol-0abc123
Description	`string`		Optional

Returns: tool_result, snapshot_id, state

AWS EC2 Create Tags

aws/ec2/create_tags · Action

Add or overwrite tags on EC2 resources (instances, volumes, etc).

Field	Type		Details
Region	`string`	Required	eu-west-2
Role ARN to Assume	`string`	Required	arn:aws:iam::<your-account>:role/FlomationAccess
Assume Role External ID (optional)	`string`		Must match the External ID in the role's trust policy
Resource IDs	`string`	Required	Comma-separated, e.g. i-0abc,vol-0def
Tags	`key_value_array`	Required	Add a Key and Value per tag

Returns: tool_result, tagged

04Delete

AWS EC2 Delete Security Group

aws/ec2/delete_security_group · Action

Delete a security group by id. Fails if the group is still in use.

Field	Type		Details
Region	`string`	Required	eu-west-2
Role ARN to Assume	`string`	Required	arn:aws:iam::<your-account>:role/FlomationAccess
Assume Role External ID (optional)	`string`		Must match the External ID in the role's trust policy
Group ID	`string`	Required	sg-0abc123

Returns: tool_result, group_id

05Describe

AWS EC2 Describe Images

aws/ec2/describe_images · Action

List AMIs by id or owner, with name, state, architecture and creation date.

Field	Type		Details
Region	`string`	Required	eu-west-2
Role ARN to Assume	`string`	Required	arn:aws:iam::<your-account>:role/FlomationAccess
Assume Role External ID (optional)	`string`		Must match the External ID in the role's trust policy
AMI IDs	`string`		Comma-separated (optional)
Owners	`string`		e.g. self, amazon, or an account id (optional)
Filter by Name	`string`		AMI name; wildcards allowed e.g. ubuntu-/22.04 (optional)
Filter by State	`multi_select`		Select one or more; none = any state — choices: Available, Pending, Failed
Filter by Architecture	`multi_select`		Select one or more; none = any — choices: x86_64, arm64, i386
Filter by Visibility	`string`		choices: Any, Public only, Private only
Filter by Platform	`string`		e.g. windows — blank includes Linux/UNIX (optional)
Filter by Tags	`key_value_array`		Only return images with these tags (blank Value matches any value for that key)

Returns: tool_result, images, count

AWS EC2 Describe Instances

aws/ec2/describe_instances · Action

List EC2 instances with their state, type, IPs, AZ and tags.

Field	Type		Details
Region	`string`	Required	eu-west-2
Role ARN to Assume	`string`	Required	arn:aws:iam::<your-account>:role/FlomationAccess
Assume Role External ID (optional)	`string`		Must match the External ID in the role's trust policy
Instance IDs	`string`		Comma-separated; leave blank for all (optional)
Filter by Tags	`key_value_array`		Only return instances with these tags (blank Value matches any value for that key)
Filter by State	`multi_select`		Select one or more; none = any state — choices: Running, Stopped, Pending, Stopping, Shutting down, Terminated
Filter by Instance Type	`string`		e.g. t3.micro (optional)
Filter by VPC ID	`string`		vpc-0abc (optional)
Filter by Subnet ID	`string`		subnet-0abc (optional)
Filter by Availability Zone	`string`		e.g. eu-west-2a (optional)

Returns: tool_result, instances, instance_ids, count

AWS EC2 Describe Key Pairs

aws/ec2/describe_key_pairs · Action

List EC2 key pairs with their name, id, type and fingerprint.

Field	Type		Details
Region	`string`	Required	eu-west-2
Role ARN to Assume	`string`	Required	arn:aws:iam::<your-account>:role/FlomationAccess
Assume Role External ID (optional)	`string`		Must match the External ID in the role's trust policy
Filter by Key Name	`string`		e.g. deploy-key (optional)
Filter by Key Type	`multi_select`		Select one or more; none = any type — choices: RSA, ED25519
Filter by Tags	`key_value_array`		Only return key pairs with these tags (blank Value matches any value for that key)

Returns: tool_result, key_pairs, count

AWS EC2 Describe Security Groups

aws/ec2/describe_security_groups · Action

List security groups with their VPC, description and inbound/outbound rules.

Field	Type		Details
Region	`string`	Required	eu-west-2
Role ARN to Assume	`string`	Required	arn:aws:iam::<your-account>:role/FlomationAccess
Assume Role External ID (optional)	`string`		Must match the External ID in the role's trust policy
Group IDs	`string`		Comma-separated; blank for all (optional)
Filter by Group Name	`string`		e.g. web-sg (optional)
Filter by VPC ID	`string`		vpc-0abc (optional)
Filter by Description	`string`		Exact description text (optional)
Filter by Tags	`key_value_array`		Only return groups with these tags (blank Value matches any value for that key)

Returns: tool_result, security_groups, count

AWS EC2 Describe Snapshots

aws/ec2/describe_snapshots · Action

List EBS snapshots by id or owner, with volume, size, state and progress.

Field	Type		Details
Region	`string`	Required	eu-west-2
Role ARN to Assume	`string`	Required	arn:aws:iam::<your-account>:role/FlomationAccess
Assume Role External ID (optional)	`string`		Must match the External ID in the role's trust policy
Snapshot IDs	`string`		Comma-separated (optional)
Owners	`string`		e.g. self (optional; blank lists all visible)
Filter by Status	`multi_select`		Select one or more; none = any status — choices: Completed, Pending, Error
Filter by Source Volume ID	`string`		vol-0abc — snapshots of this volume (optional)
Filter by Tags	`key_value_array`		Only return snapshots with these tags (blank Value matches any value for that key)

Returns: tool_result, snapshots, count

AWS EC2 Describe Volumes

aws/ec2/describe_volumes · Action

List EBS volumes with size, state, type, AZ and attachments.

Field	Type		Details
Region	`string`	Required	eu-west-2
Role ARN to Assume	`string`	Required	arn:aws:iam::<your-account>:role/FlomationAccess
Assume Role External ID (optional)	`string`		Must match the External ID in the role's trust policy
Volume IDs	`string`		Comma-separated; blank for all (optional)
Filter by Status	`multi_select`		Select one or more; none = any status — choices: Available, In use, Creating, Deleting, Deleted, Error
Filter by Volume Type	`multi_select`		Select one or more; none = any type — choices: gp3, gp2, io1, io2, st1, sc1, standard (magnetic)
Filter by Availability Zone	`string`		e.g. eu-west-2a (optional)
Filter by Attached Instance ID	`string`		i-0abc — volumes attached to this instance (optional)
Filter by Tags	`key_value_array`		Only return volumes with these tags (blank Value matches any value for that key)

Returns: tool_result, volumes, count

06Reboot

AWS EC2 Reboot Instances

aws/ec2/reboot_instances · Action

Reboot one or more EC2 instances.

Field	Type		Details
Region	`string`	Required	eu-west-2
Role ARN to Assume	`string`	Required	arn:aws:iam::<your-account>:role/FlomationAccess
Assume Role External ID (optional)	`string`		Must match the External ID in the role's trust policy
Instance IDs	`string`	Required	Comma-separated, e.g. i-0abc,i-0def

Returns: tool_result, instance_ids

07Revoke

AWS EC2 Revoke Security Group Ingress

aws/ec2/revoke_security_group_ingress · Action

Remove an inbound rule from a security group (protocol, port range and CIDR).

Field	Type		Details
Region	`string`	Required	eu-west-2
Role ARN to Assume	`string`	Required	arn:aws:iam::<your-account>:role/FlomationAccess
Assume Role External ID (optional)	`string`		Must match the External ID in the role's trust policy
Group ID	`string`	Required	sg-0abc123
From Port	`integer`		e.g. 443
To Port	`integer`		e.g. 443
CIDR	`string`	Required	0.0.0.0/0

Returns: tool_result, group_id

08Run

AWS EC2 Run Instances

aws/ec2/run_instances · Action

Launch new EC2 instances from an AMI, with type, key pair, subnet and security groups.

Field	Type		Details
Region	`string`	Required	eu-west-2
Role ARN to Assume	`string`	Required	arn:aws:iam::<your-account>:role/FlomationAccess
Assume Role External ID (optional)	`string`		Must match the External ID in the role's trust policy
AMI ID	`string`	Required	ami-0abc123
Instance Type	`string`	Required	t3.micro
Count	`integer`		1
Key Pair Name	`string`		Optional SSH key pair
Subnet ID	`string`		Optional subnet
Security Group IDs	`string`		Comma-separated (optional)
Name Tag	`string`		Sets the Name tag (optional)
User Data	`text`		Startup script, plain text (optional)

Returns: tool_result, instance_ids, count

09Start

AWS EC2 Start Instances

aws/ec2/start_instances · Action

Start one or more stopped EC2 instances.

Field	Type		Details
Region	`string`	Required	eu-west-2
Role ARN to Assume	`string`	Required	arn:aws:iam::<your-account>:role/FlomationAccess
Assume Role External ID (optional)	`string`		Must match the External ID in the role's trust policy
Instance IDs	`string`	Required	Comma-separated, e.g. i-0abc,i-0def

Returns: tool_result, state_changes

10Stop

AWS EC2 Stop Instances

aws/ec2/stop_instances · Action

Stop one or more running EC2 instances.

Field	Type		Details
Region	`string`	Required	eu-west-2
Role ARN to Assume	`string`	Required	arn:aws:iam::<your-account>:role/FlomationAccess
Assume Role External ID (optional)	`string`		Must match the External ID in the role's trust policy
Instance IDs	`string`	Required	Comma-separated, e.g. i-0abc,i-0def
Force Stop	`boolean`		Force stop without a clean shutdown

Returns: tool_result, state_changes

11Terminate

AWS EC2 Terminate Instances

aws/ec2/terminate_instances · Action

Permanently terminate EC2 instances. Destructive and irreversible.

Field	Type		Details
Region	`string`	Required	eu-west-2
Role ARN to Assume	`string`	Required	arn:aws:iam::<your-account>:role/FlomationAccess
Assume Role External ID (optional)	`string`		Must match the External ID in the role's trust policy
Instance IDs	`string`	Required	Comma-separated, e.g. i-0abc,i-0def

Returns: tool_result, state_changes

12Notes & Limitations

Behaviours and constraints worth knowing before you build with these nodes.

Every action runs against the single Region you set, so instance, volume, snapshot and security-group IDs that live in another region will report as not found; point the Region at where the resource actually lives.
A launch requests the exact Count with no partial fulfilment, so if the account's instance or vCPU limits cannot accommodate the full number, AWS launches none of them and returns an error.
A newly launched or recently changed instance can take a few seconds to appear in a describe result because EC2's inventory is eventually consistent, so add a short delay before a describe step that reads back what an earlier step created.
Terminated instances keep appearing in describe results in the terminated state for a period, typically around an hour, before AWS drops them, so filter on state rather than assuming they vanish immediately.
Authorizing security group ingress fails when an identical protocol, port range and CIDR rule already exists on the group, so guard against re-runs or expect an error on repeat executions.
Force Stop bypasses the guest operating system's clean shutdown and can cause data loss or filesystem corruption, so reserve it for instances that are already unresponsive.