Me and my company intend to start using ec2 for distributing some cpu-intensive pieces code, involving a few 10s of gb of data, however I have some concern about the protection of the intellectual property which the code holds (and to a much lesser degree the data too).
At least for the code, I figured I could go several ways at this:
- Create an ami with an encrypted filesystem inside, then launch many instances out of it.
- Same thing just with EBS filesystem (not sure if i can even do this with many instances)
- Create the filesystem on s3 and mount it from there by s3fs
Which way is preferable? (important note - the code and data are not supposed to change so i have not problem mounting things as read only)