AWS elasticbeanstalk documentation change
Summary
Updated EC2 instance profile creation workflow to allow selection of existing profiles and reordered steps
Security assessment
The changes improve documentation clarity about role selection but don't address specific vulnerabilities. While proper IAM roles are security-critical, this update focuses on workflow improvements rather than patching security issues or introducing new security controls.
Diff
diff --git a/elasticbeanstalk/latest/dg/environments-create-wizard.md b/elasticbeanstalk/latest/dg/environments-create-wizard.md index a96003008..77192581f 100644 --- a//elasticbeanstalk/latest/dg/environments-create-wizard.md +++ b//elasticbeanstalk/latest/dg/environments-create-wizard.md @@ -217 +217 @@ The first time you create an environment in the Elastic Beanstalk console, you m -###### To create the EC2 instance profile +###### To create or select an EC2 instance profile @@ -219 +219 @@ The first time you create an environment in the Elastic Beanstalk console, you m - 1. Choose **Create role**. + 1. If you have previously created an **EC2 instance profile** and would like to choose an existing one, select the value from the **EC2 instance profile** drop-down and skip the remainder of these steps to create an EC2 instance profile. @@ -221 +221 @@ The first time you create an environment in the Elastic Beanstalk console, you m - 2. For **Trusted entity type** , choose **AWS service**. + 2. If you don't see any values listed for **EC2 instance profile** , or you'd like to create a new one, continue with the next steps. @@ -223 +223 @@ The first time you create an environment in the Elastic Beanstalk console, you m - 3. For **Use case** , choose**Elastic Beanstalk – Compute**. + 3. Choose **Create role**. @@ -225 +225 @@ The first time you create an environment in the Elastic Beanstalk console, you m - 4. Choose **Next**. + 4. For **Trusted entity type** , choose **AWS service**. @@ -227 +227,5 @@ The first time you create an environment in the Elastic Beanstalk console, you m - 5. Verify that **Permissions policies** include the following, then choose **Next** : + 5. For **Use case** , choose**Elastic Beanstalk – Compute**. + + 6. Choose **Next**. + + 7. Verify that **Permissions policies** include the following, then choose **Next** : @@ -235 +239 @@ The first time you create an environment in the Elastic Beanstalk console, you m - 6. Choose **Create role**. + 8. Choose **Create role**. @@ -237 +241 @@ The first time you create an environment in the Elastic Beanstalk console, you m - 7. Return to the **Configure service access** tab, refresh the list, then select the newly created EC2 instance profile. + 9. Return to the **Configure service access** tab, refresh the list, then select the newly created EC2 instance profile.