AWS elasticbeanstalk documentation change
Summary
Streamlined EC2 instance profile creation steps, removing redundant instructions and updating UI workflow
Security assessment
Procedural updates to IAM role creation focus on workflow efficiency rather than security fixes. While IAM roles are security-related, there is no evidence this change addresses a specific vulnerability or adds new security features.
Diff
diff --git a/elasticbeanstalk/latest/dg/java-getstarted.md b/elasticbeanstalk/latest/dg/java-getstarted.md index b4fb9d0ba..f16ff338f 100644 --- a//elasticbeanstalk/latest/dg/java-getstarted.md +++ b//elasticbeanstalk/latest/dg/java-getstarted.md @@ -140 +140 @@ For details on all available settings, see [The create new environment wizard](. -###### To create an IAM Role for EC2 instance profile selection +###### To create the EC2 instance profile @@ -142 +142 @@ For details on all available settings, see [The create new environment wizard](. - 1. Choose **View permission details**. This displays under the **EC2 instance profile** dropdown list. + 1. Choose **Create role**. @@ -144 +144 @@ For details on all available settings, see [The create new environment wizard](. -A modal window titled **View instance profile permissions** displays. This window lists the managed profiles that you'll need to attach to the new EC2 instance profile that you create. It also provides a link to launch the IAM console. + 2. For **Trusted entity type** , choose **AWS service**. @@ -146 +146 @@ A modal window titled **View instance profile permissions** displays. This windo - 2. Choose the **IAM console** link displayed at the top of the window. + 3. For **Use case** , choose**Elastic Beanstalk – Compute**. @@ -148 +148 @@ A modal window titled **View instance profile permissions** displays. This windo - 3. In the IAM console navigation pane, choose **Roles**. + 4. Choose **Next**. @@ -150,9 +150 @@ A modal window titled **View instance profile permissions** displays. This windo - 4. Choose **Create role**. - - 5. Under **Trusted entity type** , choose **AWS service**. - - 6. Under **Use case** , choose **EC2**. - - 7. Choose **Next**. - - 8. Attach the appropriate managed policies. Scroll in the **View instance profile permissions** modal window to see the managed policies. The policies are also listed here: + 5. Verify that **Permissions policies** include the following, then choose **Next** : @@ -166,17 +158 @@ A modal window titled **View instance profile permissions** displays. This windo - 9. Choose **Next**. - - 10. Enter a name for the role. - - 11. (Optional) Add tags to the role. - - 12. Choose **Create role**. - - 13. Return to the Elastic Beanstalk console window that is open. - - 14. Close the modal window **View instance profile permissions**. - -###### Important - -Do not close the browser page that displays the Elastic Beanstalk console. - - 15. Choose  (refresh), next to the **EC2 instance profile** dropdown list. + 6. Choose **Create role**. @@ -184 +160 @@ Do not close the browser page that displays the Elastic Beanstalk console. -This refreshes the dropdown list, so that the Role you just created will display in the dropdown list. + 7. Return to the **Configure service access** tab, refresh the list, then select the newly created EC2 instance profile.