194

Is there a way to look up the region of an instance from within the instance?

I'm looking for something similar to the method of finding the instance id.

4

31 Answers 31

191

That URL (http://169.254.169.254/latest/dynamic/instance-identity/document) doesn't appear to work anymore. I get a 404 when I tried to use it. I have the following code which seems to work though:

EC2_AVAIL_ZONE=`curl -s http://169.254.169.254/latest/meta-data/placement/availability-zone`
EC2_REGION="`echo \"$EC2_AVAIL_ZONE\" | sed 's/[a-z]$//'`"
15
  • 5
    This is to be run inside the EC2 instance and is powered by AWS's backends. It will not work anywhere else (essentially because that IP is an APIPA). Also there is no way to get this information directly from inside the instance without connecting to a metadata source. This assumes that the 169.254.169.254 API is available, and your script should handle network failures accordingly. ec2-metadata is just a wrapper for this API, but essentially does the same thing.
    – dannosaur
    Apr 7, 2015 at 7:50
  • 2
    In all honesty when I came up with that 2-liner I was just poking about the API looking for anything I could use to identify the correct region. The AWS metadata API is fully documented here: docs.aws.amazon.com/AWSEC2/latest/UserGuide/…
    – dannosaur
    May 18, 2015 at 18:10
  • 12
    Much simpler sed replace command than the one provided for the EC2_REGION: sed 's/[a-z]$//
    – threejeez
    Aug 13, 2015 at 17:48
  • 2
    If this is in a bootscript, the metadata service may not be instantiated yet - if so, wait and try again. I've seen it take 10-15 seconds after boot for the metadata location to become available.
    – vacri
    Mar 27, 2018 at 3:46
  • 1
    You can avoid calling sed echo "${EC2_AVAIL_ZONE: : -1}". In bash 4.2+ you can remove space between two :.
    – kikap
    May 17, 2018 at 19:06
94

There is one more way of achieving that:

REGION=`curl http://169.254.169.254/latest/dynamic/instance-identity/document|grep region|awk -F\" '{print $4}'`

echo $REGION

us-east-1
5
  • Should this work in any region/az (and on any AMI)? I'm getting 404 - Not Found trying to GET that URL from a machine in us-east-1a. Jun 21, 2012 at 6:02
  • @AdamMonsen perhaps it was a transient error. I'm on us-east-1a and it works great. Mar 12, 2014 at 19:19
  • 6
    With jq: curl -s http://169.254.169.254/latest/dynamic/instance-identity/document | jq -r .region
    – Yaron
    Jun 17, 2014 at 12:08
  • 4
    With awk: curl -s http://169.254.169.254/latest/dynamic/instance-identity/document | awk -F\" '/region/ {print $4}'
    – Yaron
    Aug 4, 2014 at 9:23
  • 1
    This is not secure or safe to rely on.
    – chicks
    Apr 3, 2015 at 19:54
48
ec2-metadata --availability-zone | sed 's/.$//'

For debian based systems, the command is without dash.

ec2metadata --availability-zone | sed 's/.$//'
2
  • 9
    Get pure string with only the region name: ec2-metadata --availability-zone | sed 's/placement: \(.*\).$/\1/'
    – nahsh
    Jun 6, 2018 at 11:58
  • ec2-metadata doesn't seem to be something that's available by default - can you include installation instructions?
    – Tim Malone
    Apr 17, 2019 at 3:39
47

If you are OK with using jq, you can run the following:

curl -s http://169.254.169.254/latest/dynamic/instance-identity/document | jq .region -r

I guess it's the cleanest way.

45

At some point since most of these answers have been posted, AWS did the reasonable thing and implemented a new path: latest/meta-data/placement/region.

This means getting the region should be as simple as

curl http://169.254.169.254/latest/meta-data/placement/region

EDIT: It's also probably worth mentioning that this endpoint was made available in the 2019-10-01 release of the metadata API. Make sure your instance supports that version or later before using this by checking http://169.254.169.254/.

5
  • This worked for me on some instances, but on others I get 404 Not Found, even through the latest available release is 2020-10-27.
    – yurez
    Jan 19, 2021 at 12:04
  • Huh, try just http://169.254.169.254/latest/meta-data/placement. Does region come back as one of the listed options?
    – SteveGoob
    Jan 19, 2021 at 18:36
  • 2
    It turned out that the problematic instances were running without restart since before region endpoint was added, which is why it was unavailable - as documented.
    – yurez
    Jan 20, 2021 at 11:58
  • Is the date correct? According to their docs this category was added in the 2020-08-24 version.
    – Andy
    Feb 21, 2023 at 1:09
  • @Andy That's interesting... I would venture to say that AWS may have that wrong, since it's obvious it was available before 2020-08-24 seeing as the answer dates to a couple of months earlier.
    – SteveGoob
    Feb 22, 2023 at 2:06
27

If you want to avoid regular expression, here's a one-liner you can do with Python:

curl -s http://169.254.169.254/latest/dynamic/instance-identity/document | python -c "import json,sys; print json.loads(sys.stdin.read())['region']"
3
  • This answer should be higher! Sep 21, 2016 at 9:15
  • @KostasDemiris I agree, much rather read the value in from the JSON structure than a regular expression.
    – lasec0203
    Aug 15, 2017 at 1:58
  • 1
    I agree this seems to be the best way to do it if you don't have jq installed. You would really expect AWS to expose this as something like 169.254.169.254/latest/meta-data/placement/region ...
    – Krenair
    Jan 22, 2018 at 13:21
18

Easiest I found so far

 curl -s 169.254.169.254/latest/meta-data/placement/availability-zone | sed 's/.$//'
1
  • 1
    This has the benefit of no non-default dependencies and it's only a single line. Aug 29, 2018 at 19:56
17

You can use ec2-metadata:

ec2-metadata -z | grep -Po "(us|sa|eu|ap)-(north|south|central)?(east|west)?-[0-9]+"
5
  • 2
    With this, if you're in eu-central-1 you're screwed.
    – dannosaur
    Apr 7, 2015 at 7:51
  • 2
    central didn't exist when I initially wrote my answer. It's added now. Apr 7, 2015 at 8:24
  • 24
    A script that breaks every time AWS adds a new region doesn't seem like a particularly strong solution, to me. Jun 9, 2015 at 17:19
  • 1
    Instead of grep, awk '{split($2,arr,"-"); print arr[1]"-"arr[2]}' will keep just the first two components of the AZ name.
    – dskrvk
    Sep 14, 2016 at 21:04
  • @dskrvk If you just keep the first two components, how do you distringuish between eu-west-1, eu-west-2 and eu-west-3 (Also us-west-1 and us-west-2) @OP: just matching '[a-z][a-z]-[a-z]*-[0-9][0-9]*' seems safer (that is a basic regex, it can be made shorter with an extended RE). (The current regex will break on the ca region, the af regions and the me region) Jul 6, 2020 at 8:54
14

very simple one liner

export AVAILABILITY_ZONE=`wget -qO- http://instance-data/latest/meta-data/placement/availability-zone`
export REGION_ID=${AVAILABILITY_ZONE:0:${#AVAILABILITY_ZONE} - 1}
3
  • 10
    That's two lines
    – Christian
    Mar 27, 2018 at 9:12
  • 1
    But this is not working on us-west-1 region. Returns curl: (6) Could not resolve host: instance-data; Name or service not known error. Apr 4, 2018 at 10:08
  • 1
    @S.K.Venkat That is likely related to your VPC's DNS settings... Using the IP for the metadata-api seems safer (half of the other answers does that) Jul 6, 2020 at 8:57
7

Get the region from the availability zone, strip off the last letter of it.

ec2-metadata -z | awk '{print $2}' | sed 's/[a-z]$//'
5

If you work with json - use right tools. jq much powerful in this case.

# curl -s curl -s http://169.254.169.254/latest/dynamic/instance-identity/document | jq -r '.region'
eu-west-1
4

If you're able to use the AWS Java SDK, there is now a method that will return the current region name (such as "us-east-1", "eu-west-1"):

http://docs.aws.amazon.com/AWSJavaSDK/latest/javadoc/com/amazonaws/regions/Regions.html#getCurrentRegion()

4

This is the cleanest solution I found:

curl -s http://169.254.169.254/latest/dynamic/instance-identity/document |sed -n 's/  "region" : "\(.*\)"/\1/p'

E.g.,

export REGION=$(curl -s http://169.254.169.254/latest/dynamic/instance-identity/document |sed -n 's/  "region" : "\(.*\)"/\1/p')

  • Doesn't make an API call, uses EC2 instance meta-data
  • Only uses curl, and basic sed, so no dependencies on SDKs or tools not likely to be installed.
  • Doesn't attempt to parse the Availability Zone name, so no worries if AWS changes AZ/Region name format
2
  • Yep perfect, thanks. This result can easily be deserialized into a json object. Jun 16, 2015 at 17:44
  • I'm getting a comma at the end.
    – Craig
    Jun 4, 2017 at 4:32
4

Thanks to https://unix.stackexchange.com/a/144330/135640, with bash 4.2+ we can just strip the last char from the availability zone:

$ region=`curl -s 169.254.169.254/latest/meta-data/placement/availability-zone`
$ region=${region::-1}
$ echo $region
us-east-1

This assumes AWS continues to use a single character for availability zones appended to the region.

2
  • 5
    We've always been able to strip the last character in shell: region=${region%?} Jan 21, 2016 at 14:58
  • This in essence is the same answer which is in "Systems Operations on AWS" course from aws.qwiklabs.com (unfortunately behind a paywall). "Lab 1 - Auditing Your AWS Resources with AWS Systems Manager and AWS Config" has this code: AZ=`curl -s http://169.254.169.254/latest/meta-data/placement/availability-zone` export AWS_DEFAULT_REGION=${AZ::-1} Nov 1, 2021 at 6:37
4

2 liner that works as long as you are using ec2.internal as your search domain:

az=$(curl -s http://instance-data/latest/meta-data/placement/availability-zone)
region=${az:0:${#az} - 1}
4

For anyone wanting to do this with good ol powershell

$var = (curl http://169.254.169.254/latest/dynamic/instance-identity/document | Select-String-Pattern "Zone" | ConvertFrom-Json | Select-Object -ExpandProperty "region")
echo $var
4

2024 - There are two types of calls

IMDSv2 (Recommended)

You must retrieve an auth token before getting meta data. The following call will set an environment variable for you to reuse.

TOKEN=`curl -X PUT "http://169.254.169.254/latest/api/token" -H "X-aws-ec2-metadata-token-ttl-seconds: 21600"`

Use the auth token to get the region (with other APIs calls too)

curl http://169.254.169.254/latest/meta-data/placement/region -H "X-aws-ec2-metadata-token: $TOKEN"

IMDSv1

No token is required in v1. Only works if v2 is set to optional (see screenshot below). You will see an empty string response if you try v1 in a v2-only environment.

curl http://169.254.169.254/latest/meta-data/placement/region

How do I know which version to use?

Use v2 if you can. If you have legacy instances and need this data now, use v1 with a roadmap to migration.

v1

Region vs Availability Zone (us-east-1 vs us-east-1a)

  • Region - Regional location of the instance. Returns the same region data as on AWS's region dropdown. Examples: us-east-2, ap-southeast-1.
  • Availability Zone - Returns the specific zone within a region, denoted by the character at the end of a region. This will mirror the subnet mapped to the instance. Use the availability zone API call instead of the region API call to get this data. Examples: us-east-2a, us-east-2c, ap-southeast-1b

Docs: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instancedata-data-categories.html

What is 169.254.169.254?

It's a special-use address. It only works within the EC2 instance.

Detailed answer: https://serverfault.com/questions/427018/what-is-this-ip-address-169-254-169-254

1
  • 1
    I recommend just running the IMDSv2 commands, as they also work on machines configured with IMDSv1. Mar 15 at 19:18
3

Or don't make Ubuntu or this tool a requirement and simply do:

: "${EBS_VOLUME_AVAILABILITY_ZONE:=$(curl -s http://169.254.169.254/latest/meta-data/placement/availability-zone)}"
: ${EBS_VOLUME_REGION:="${EBS_VOLUME_AVAILABILITY_ZONE%%*([![:digit:]])}"}
1
  • 2
    Note that this only works because currently the availability zone is always the region name with a lower-case letter appended to it (e.g. region is "us-west-1", zone is "us-west-1a"). If Amazon ever breaks this pattern, then the logic above will no longer work. Apr 1, 2011 at 16:19
3

This works for eu-central-1 as well as the various letter zones. (I don't have enough rep to reply to the sed answer above)

ec2-metadata --availability-zone | sed 's/[a-z]$//'
1
  • It should be ec2metadata --availability-zone | sed 's/.$//' (without dash) Nov 14, 2019 at 22:08
3

If you're running on windows, you can use this powershell one-liner:

$region=(Invoke-RestMethod "http://169.254.169.254/latest/dynamic/instance-identity/document").region
1

For finding out information about the EC2 you are logged into, you can use the ec2-metadata tool.

You can install the tool by following this link. After installing the tool, you can run

# ec2-metadata -z

to find out the region.

This tools comes installed with the latest (10.10) Ubuntu AMIs,

1
  • 4
    This is incorrect. ec2-metadata -z only shows the availability zone, not the region. Apr 1, 2011 at 16:21
1

If you are looking to get region using JS, this should work :

meta.request("/latest/meta-data/placement/availability-zone",function(err,data){
        if(err)
                console.log(err);
        else{
                console.log(data);
                str = data.substring(0, data.length - 1);
                AWS.config.update({region:str});
                ec2 = new AWS.EC2();
            }
     });

This was the mapping found from AWS DOCS, in response to metadata API call, just trim the last character should work.

  eu-west-1a :eu-west-1
  eu-west-1b :eu-west-1
  eu-west-1c :eu-west-1
  us-east-1a :us-east-1
  us-east-1b :us-east-1
  us-east-1c :us-east-1
  us-east-1d :us-east-1
  ap-northeast-1a :ap-northeast-1
  ap-northeast-1b :ap-northeast-1
  us-west-1a :us-west-1
  us-west-1b :us-west-1
  us-west-1c :us-west-1
  ap-southeast-1a :ap-southeast-1
  ap-southeast-1b :ap-southeast-1
1

Was also looking for a solution to find region from the instance and here is my pure Bash solution:

az=$(curl -s http://169.254.169.254/latest/meta-data/placement/availability-zone)
region=${az:0:${#az}-1}

unless there are regions where AZ has more than two letters, which I'm not aware of.

1

If you are looking for a simpler way to do it, you can look at /etc/resolv.conf and find a line like "search us-west-2.compute.internal". For example:

$ grep "^search" /etc/resolv.conf | sed "s:.* ::; s:\..*::"
us-west-2
1

All this no longer works on AMI Linux 2... I found this offline (undocumented) approach:

REGION=`cat /opt/elasticbeanstalk/config/ebenvinfo/region`
echo $REGION

# output example:
us-east-1
1
  • It seems to be the only way to get it on Amazon Linux 2023 as well. Thanks.
    – karwan
    Jan 16 at 9:20
1

If you are using IMDSv2, you'll need the token first.

Here's an example using bash, which also depends on curl:

function get-aws-region() {
  imdsv2_token="$(
    curl -s -X PUT "http://169.254.169.254/latest/api/token" \
            -H "X-aws-ec2-metadata-token-ttl-seconds: 1"
  )"
  curl -s http://169.254.169.254/latest/meta-data/placement/region \
         -H "X-aws-ec2-metadata-token: $imdsv2_token"
}

This gets a very short-lived token and uses it to get the region.

1

According to the latest IMDSv2, we need to get the token and use the token while retrieving the metadata.

TOKEN=`curl -X PUT "http://169.254.169.254/latest/api/token" -H "X-aws-ec2-metadata-token-ttl-seconds: 21600"`
EC2_AVAIL_ZONE=$(curl -H "X-aws-ec2-metadata-token: $TOKEN" http://169.254.169.254/latest/meta-data/placement/availability-zone)
EC2_REGION=$(curl -H "X-aws-ec2-metadata-token: $TOKEN" http://169.254.169.254/latest/meta-data/placement/region)
0

ec2metadata (no dash) is the current command to provide you all the aws hosting info about your ec2 box. this is the most elegant and secure approach. (ec2-metadata is the old, no longer valid command.)

1
  • This could depend on the virtual box type you've selected. I stick with Linux.
    – GViz
    Dec 9, 2019 at 17:39
0

A method using only egrep, which should work on most any linux instance spun up without having to install any extra tooling. I tested this against a list of all current AWS regions and they all match.

curl http://169.254.169.254/latest/meta-data/placement/availability-zone | egrep -o '(\w)+-(\w)+-[0-9]'

Explanation of the REGEX:

  • "(\w)+" This matches any number of letters
  • "-" matches only a single dash
  • "[0-9]" matches any 1 number

If you want this into a variable do:

region=$(curl http://169.254.169.254/latest/meta-data/placement/availability-zone | egrep -o '(\w)+-(\w)+-[0-9]')

0

For the sed and curl solution it looks like format has changed a bit. For me works

curl -s http://169.254.169.254/latest/dynamic/instance-identity/document | sed -n 's/ "region" : "\(.*\)"[,]/\1/p'

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.