Maris B.'s questions

Let's Encrypt certbot have subcommand enhance that has a description "Add security enhancements to your existing configuration".

The only additional information that I can find in certbot's CLI help file is:

enhance: Helps to harden the TLS configuration by adding security enhancements to already existing configuration.

And still it is not clear what enchantments are added to existing configuration. Which files are modified, etc... I am particularly interested in configuration with Ubuntu + Apache HTTP Server (using --apache option).

In short - OS Amazon Linux or Ubuntu. One EC2 instance (or OpsWorks instance?) is running. Once a day start second instance, update it with latest security updates, install my app. Shutdown first instance. Repeat every day...

AWS documentation states:

By default, AWS OpsWorks automatically installs the latest updates during setup... We recommend that you... Create and start new instances to replace your current online instances. Then delete the current instances. The new instances will have the latest set of security patches installed during setup.

How to automate this process?

I know, I can start one micro instance to manage this process via CLI, but I would prefer to use some AWS built-in tool, so I can get notifications on failure, to add some redundancy (if CLI instance fails), everything continues to work on new CLI / AWS API versions etc.

Am I missing some elegant approach?

Update: Ability to use existing Elastic IP is preferred.

A while ago I read, that you get 3 IOPS per GB for gp2 SSD volumes. For example, that would be 24 IOPS for 8 GB volume. Now I read the documentation (https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSVolumeTypes.html) and it states:

... Between a minimum of 100 IOPS (at 33.33 GiB and below) and a maximum of 10,000 IOPS (at 3,334 GiB and above), baseline performance scales linearly at 3 IOPS per GiB of volume size. A gp2 volume can range in size from 1 GiB to 16 TiB.

So if I create 1 GB volume, will I be capped to 3 IOPS, or 100 IOPS?

UPDATE: In the official AWS forum someone from Amazon talks about 24 IOPS for 8 GB drive, but this was in 2014. What has changed since then? Limit is lifted? (https://forums.aws.amazon.com/thread.jspa?threadID=162482)