AWS elasticbeanstalk documentation change
Summary
Updated AI analysis availability dates for Linux and Windows platforms, added prerequisites for AWS Marketplace permissions (aws-marketplace:Subscribe, etc.) for first-time use of Anthropic Claude models, and clarified platform requirements.
Security assessment
The change adds documentation about IAM permissions required to prevent access denied errors when using AI features, which relates to security controls, but no concrete evidence of a security issue being fixed; it is a clarification for feature enablement.
Diff
diff --git a/elasticbeanstalk/latest/dg/health-ai-analysis.md b/elasticbeanstalk/latest/dg/health-ai-analysis.md index 837495a9d..5f9320a86 100644 --- a//elasticbeanstalk/latest/dg/health-ai-analysis.md +++ b//elasticbeanstalk/latest/dg/health-ai-analysis.md @@ -15 +15 @@ AWS Elastic Beanstalk's AI-powered analysis identifies root causes and recommend -AI analysis is available only on supported Amazon Linux 2 and AL2023 platform versions released on or after February 16, 2026. +AI analysis is available on supported Amazon Linux 2 and AL2023 platform versions released on or after February 26, 2026. For Windows Server platforms, AI analysis is available on platform versions released on or after April 22, 2026. @@ -30,0 +31,6 @@ Before you use AI analysis, verify that your environment meets the following req + * Even after submitting the use case details form, the first invocation of an Anthropic Claude model in your account requires AWS Marketplace permissions to complete an automatic model subscription. If your instance profile doesn't have these permissions, AI analysis fails with the following error: + +`AccessDeniedException: Model access is denied due to IAM user or service role is not authorized to perform the required AWS Marketplace actions (aws-marketplace:ViewSubscriptions, aws-marketplace:Subscribe) to enable access to this model.` + +To resolve this, add `aws-marketplace:Subscribe`, `aws-marketplace:Unsubscribe`, and `aws-marketplace:ViewSubscriptions` permissions to your instance profile. These permissions are only needed for the first invocation in an account. After the model is enabled, you can remove them. For more information, see [Grant IAM permissions to request access to Amazon Bedrock foundation models](https://docs.aws.amazon.com/bedrock/latest/userguide/model-access.html#model-access-permissions). + @@ -52,0 +59,4 @@ For more information about configuring instance profiles, see [Managing Elastic +###### Note + +If this is the first time an Anthropic Claude model is being invoked in your account, you also need AWS Marketplace permissions (`aws-marketplace:Subscribe`, `aws-marketplace:Unsubscribe`, and `aws-marketplace:ViewSubscriptions`). See Prerequisites for details. + @@ -112 +122 @@ The `--analyze` option requires EB CLI version 3.27 or later. - * **Platform requirement** – AI analysis is available only on Amazon Linux 2 and AL2023 based platform versions released on or after February 16, 2026. To use this feature, update your environment to a supported platform version. For more information, see [Updating your Elastic Beanstalk environment's platform version](./using-features.platform.upgrade.html). + * **Platform requirement** – AI analysis is available on Amazon Linux 2 and AL2023 based platform versions released on or after February 26, 2026. For Windows Server platforms, AI analysis is available on platform versions released on or after April 22, 2026. To use this feature, update your environment to a supported platform version. For more information, see [Updating your Elastic Beanstalk environment's platform version](./using-features.platform.upgrade.html). @@ -125 +135 @@ The `--analyze` option requires EB CLI version 3.27 or later. -AI analysis is supported on Amazon Linux 2 and AL2023 based platform versions released on or after [February 16, 2026](RELEASE_NOTES_URL). To verify your platform version, see [Elastic Beanstalk release notes](https://docs.aws.amazon.com/elasticbeanstalk/latest/relnotes/welcome.html). +AI analysis is supported on Amazon Linux 2 and AL2023 based platform versions released on or after [February 26, 2026](https://docs.aws.amazon.com/elasticbeanstalk/latest/relnotes/release-2026-02-26-al2023.html). For Windows Server platforms, AI analysis is supported on platform versions released on or after [April 22, 2026](https://docs.aws.amazon.com/elasticbeanstalk/latest/relnotes/release-2026-04-22-windows.html). To verify your platform version, see [Elastic Beanstalk release notes](https://docs.aws.amazon.com/elasticbeanstalk/latest/relnotes/welcome.html).