AWS Security ChangesHomeSearch

AWS elasticbeanstalk documentation change

Service: elasticbeanstalk · 2026-05-22 · Documentation high

File: elasticbeanstalk/latest/platforms/platforms-retiring.md

Summary

Updated retiring platform versions list: added .NET on Windows Server and PHP sections, incremented version numbers for Docker, ECS, Go, Java SE, Tomcat, .NET Core, Node.js, Python, and Ruby platforms, and added retirement warnings for Windows Server 2016.

Security assessment

The change adds explicit warnings about security risks when using retiring Windows Server 2016 platforms after end-of-life (no security updates, inaccessible AMIs creating operational risks). However, there's no evidence of addressing a specific current vulnerability; it's a standard retirement notice with security risk awareness.

Diff

diff --git a/elasticbeanstalk/latest/platforms/platforms-retiring.md b/elasticbeanstalk/latest/platforms/platforms-retiring.md
index 2d6b3aba4..102769865 100644
--- a//elasticbeanstalk/latest/platforms/platforms-retiring.md
+++ b//elasticbeanstalk/latest/platforms/platforms-retiring.md
@@ -5 +5 @@
-DockerGoJava SETomcat.NET Core on LinuxNode.jsPythonRuby
+DockerGoJava SETomcat.NET Core on Linux.NET on Windows ServerNode.jsPHPPythonRuby
@@ -30,0 +31,2 @@ The following sections provide information about all retiring platform versions.
+  * .NET on Windows Server
+
@@ -32,0 +35,2 @@ The following sections provide information about all retiring platform versions.
+  * PHP
+
@@ -46,2 +50,2 @@ Platform Version and _Solution Stack Name_ |  AMI |  ECS Agent |  Docker |  Dock
-**Docker AL2 version 4.8.2** _64bit Amazon Linux 2 v4.8.2 running Docker_ |  2.0.20260504 |  |  25.0.14 |  5.1.3 |  nginx 1.28.3 |  2026-06-30  
-**ECS AL2 version 3.9.2** _64bit Amazon Linux 2 v3.9.2 running ECS_ |  2.0.20260504 |  1.102.2 |  25.0.14 |  |  |  2026-06-30  
+**Docker AL2 version 4.8.3** _64bit Amazon Linux 2 v4.8.3 running Docker_ |  2.0.20260515 |  |  25.0.14 |  5.1.3 |  nginx 1.28.3 |  2026-06-30  
+**ECS AL2 version 3.9.3** _64bit Amazon Linux 2 v3.9.3 running ECS_ |  2.0.20260515 |  1.103.0 |  25.0.14 |  |  |  2026-06-30  
@@ -57 +61 @@ Platform Version and _Solution Stack Name_ |  AMI |  Language |  AWS X-Ray |  Pr
-**Go 1 AL2 version 3.18.2** _64bit Amazon Linux 2 v3.18.2 running Go 1_ |  2.0.20260504 |  Go 1.26.2 |  3.6.2 |  nginx 1.28.3 |  2026-06-30  
+**Go 1 AL2 version 3.18.3** _64bit Amazon Linux 2 v3.18.3 running Go 1_ |  2.0.20260515 |  Go 1.26.3 |  3.6.2 |  nginx 1.28.3 |  2026-06-30  
@@ -67,3 +71,3 @@ Platform Version and _Solution Stack Name_ |  AMI |  Language |  Tools |  AWS X-
-**Corretto 17 version 3.13.2** _64bit Amazon Linux 2 v3.13.2 running Corretto 17_ |  2.0.20260504 |  Corretto 17.0.19.10.1 |  Ant 1.10.17, Gradle 8.14.5, Maven 3.9.15 |  3.6.2 |  nginx 1.28.3 |  2026-06-30  
-**Corretto 11 version 3.13.2** _64bit Amazon Linux 2 v3.13.2 running Corretto 11_ |  2.0.20260504 |  Corretto 11.0.31.11.1 |  Ant 1.10.17, Gradle 8.14.5, Maven 3.9.15 |  3.6.2 |  nginx 1.28.3 |  2026-06-30  
-**Corretto 8 version 3.13.2** _64bit Amazon Linux 2 v3.13.2 running Corretto 8_ |  2.0.20260504 |  Corretto 8.492.09.1 |  Ant 1.10.17, Gradle 8.14.5, Maven 3.9.15 |  3.6.2 |  nginx 1.28.3 |  2026-06-30  
+**Corretto 17 version 3.13.3** _64bit Amazon Linux 2 v3.13.3 running Corretto 17_ |  2.0.20260515 |  Corretto 17.0.19.10.1 |  Ant 1.10.17, Gradle 8.14.5, Maven 3.9.16 |  3.6.2 |  nginx 1.28.3 |  2026-06-30  
+**Corretto 11 version 3.13.3** _64bit Amazon Linux 2 v3.13.3 running Corretto 11_ |  2.0.20260515 |  Corretto 11.0.31.11.1 |  Ant 1.10.17, Gradle 8.14.5, Maven 3.9.16 |  3.6.2 |  nginx 1.28.3 |  2026-06-30  
+**Corretto 8 version 3.13.3** _64bit Amazon Linux 2 v3.13.3 running Corretto 8_ |  2.0.20260515 |  Corretto 8.492.09.1 |  Ant 1.10.17, Gradle 8.14.5, Maven 3.9.16 |  3.6.2 |  nginx 1.28.3 |  2026-06-30  
@@ -79,2 +83,2 @@ Platform Version and _Solution Stack Name_ |  AMI |  Language |  AWS X-Ray |  Ap
-**Corretto 11 with Tomcat 9 AL2 version 4.13.2** _64bit Amazon Linux 2 v4.13.2 running Tomcat 9 Corretto 11_ |  2.0.20260504 |  Corretto 11.0.31.11.1 |  3.6.2 |  Tomcat 9.0.117 |  nginx 1.28.3 (default), Apache 2.4.66 |  2026-06-30  
-**Corretto 8 with Tomcat 9 AL2 version 4.13.2** _64bit Amazon Linux 2 v4.13.2 running Tomcat 9 Corretto 8_ |  2.0.20260504 |  Corretto 8.492.09.1 |  3.6.2 |  Tomcat 9.0.117 |  nginx 1.28.3 (default), Apache 2.4.66 |  2026-06-30  
+**Corretto 11 with Tomcat 9 AL2 version 4.13.3** _64bit Amazon Linux 2 v4.13.3 running Tomcat 9 Corretto 11_ |  2.0.20260515 |  Corretto 11.0.31.11.1 |  3.6.2 |  Tomcat 9.0.117 |  nginx 1.28.3 (default), Apache 2.4.66 |  2026-06-30  
+**Corretto 8 with Tomcat 9 AL2 version 4.13.3** _64bit Amazon Linux 2 v4.13.3 running Tomcat 9 Corretto 8_ |  2.0.20260515 |  Corretto 8.492.09.1 |  3.6.2 |  Tomcat 9.0.117 |  nginx 1.28.3 (default), Apache 2.4.66 |  2026-06-30  
@@ -90 +94,3 @@ Platform Version and _Solution Stack Name_ |  Framework |  Proxy Server |  AMI |
-**.NET Core on AL2 version 2.15.2** _64bit Amazon Linux 2 v2.15.2 running .NET Core_ |  .NET 8.0.26, supports 8.0.26 |  nginx 1.28.3 |  2.0.20260504 |  3.6.2 |  2026-06-30  
+**.NET 9 on AL2023 version 3.11.0** _64bit Amazon Linux 2023 v3.11.0 running .NET 9_ |  .NET 9.0.16, supports 9.0.16 |  nginx 1.30.0 |  2023.11.20260514 |  3.6.2 |  2027-03-31  
+**.NET 8 on AL2023 version 3.11.0** _64bit Amazon Linux 2023 v3.11.0 running .NET 8_ |  .NET 8.0.27, supports 8.0.27 |  nginx 1.30.0 |  2023.11.20260514 |  3.6.2 |  2027-03-31  
+**.NET Core on AL2 version 2.15.3** _64bit Amazon Linux 2 v2.15.3 running .NET Core_ |  .NET 8.0.27, supports 8.0.27 |  nginx 1.28.3 |  2.0.20260515 |  3.6.2 |  2026-06-30  
@@ -93,0 +100,30 @@ For information about current platform versions, see [.NET Core on Linux](./plat
+## .NET on Windows Server
+
+###### Note
+
+Elastic Beanstalk platform branches based on _Windows Server 2016_ and _Windows Server Core 2016_ will retire on **September 30, 2026**. Additionally, all Amazon Machine Images (AMIs) for these platform branches will become inaccessible on **January 15, 2027**. This is to ensure that customer Elastic Beanstalk environments are aligned with the most current support offered by AWS.
+
+Starting on September 30, 2026, retired platform branches will no longer be available for new environments on Elastic Beanstalk. While you can continue to operate existing environments running on retired platform branches, these branches will no longer receive security updates, platform updates, or bug fixes from Elastic Beanstalk, creating significant security and operational risks. After January 15, 2027, the default AMIs associated with these platform branches will be inaccessible, and any activity that attempts to launch new EC2 instances based on these AMIs will fail, including auto-scaling, instance replacement, and application or configuration deployments that launch new instances.
+
+We strongly recommend that you start planning your migration to a current and fully supported Windows Server platform, such as _Windows Server 2025 with IIS 10.0_ , _Windows Server 2022 with IIS 10.0_ , or _Windows Server 2019 with IIS 10.0_. For a list of currently supported platforms see [Elastic Beanstalk supported platforms](./platforms-supported.html).
+
+If you cannot migrate to a fully supported platform, you can use a custom AMI with Windows Server 2016 as the base image. For detailed instructions, see [Preserving access to an AMI for a retired platform](https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/using-features.customenv-env-copy.html) in the _AWS Elastic Beanstalk Developer Guide_. If you need temporary access to an AMI while you perform a migration, contact AWS Support.
+
+Elastic Beanstalk has scheduled the following .NET on Windows Server platform versions for retirement.
+
+### Configuration basics
+
+Platform Version |  Solution Stack Name |  Framework |  Proxy Server |  End Date  
+---|---|---|---|---  
+**Windows Server 2016 with IIS 10.0 version 2.23.1** |  _64bit Windows Server 2016 v2.23.1 running IIS 10.0_ |  .NET 10.0.8, supports 10.0.8, 9.0.16, 8.0.27 .NET Framework 4.8, supports 4.x, 2.0 |  IIS 10.0 |  2026-09-30  
+**Windows Server Core 2016 with IIS 10.0 version 2.23.1** |  _64bit Windows Server Core 2016 v2.23.1 running IIS 10.0_ |  .NET 10.0.8, supports 10.0.8, 9.0.16, 8.0.27 .NET Framework 4.8, supports 4.x, 2.0 |  IIS 10.0 |  2026-09-30  
+  
+### More details
+
+Platform Version |  AMI version |  AWS SDK for .NET |  EC2Launch |  SSM Agent |  Web Deploy |  AWS X-Ray  
+---|---|---|---|---|---|---  
+**Windows Server 2016 with IIS 10.0 version 2.23.1** |  2026.05.13 |  3.7.1251.1 |  2.5.0 |  3.3.4268.0 |  4.0 |  3.6.3  
+**Windows Server Core 2016 with IIS 10.0 version 2.23.1** |  2026.05.13 |  3.7.1251.1 |  2.5.0 |  3.3.4268.0 |  4.0 |  3.6.3  
+  
+For information about current platform versions, see [.NET on Windows Server](./platforms-supported.html#platforms-supported.net).
+
@@ -100 +136 @@ Platform Version and _Solution Stack Name_ |  AMI |  Node.js versions (npm versi
-**Node.js 20 AL2023 version 6.10.3** _64bit Amazon Linux 2023 v6.10.3 running Node.js 20_ |  2023.11.20260505 |  20.20.2 (10.8.2) Default version: 20.20.2 |  nginx 1.28.3 (default), Apache 2.4.66 |  2.50.1 |  3.6.2 |  2026-07-31  
+**Node.js 20 AL2023 version 6.11.0** _64bit Amazon Linux 2023 v6.11.0 running Node.js 20_ |  2023.11.20260514 |  20.20.2 (10.8.2) Default version: 20.20.2 |  nginx 1.30.0 (default), Apache 2.4.66 |  2.50.1 |  3.6.2 |  2026-07-31  
@@ -103,0 +140,10 @@ For information about current platform versions, see [Node.js](./platforms-suppo
+## PHP
+
+Elastic Beanstalk has scheduled the following PHP platform versions for retirement.
+
+Platform Version and _Solution Stack Name_ |  AMI |  Language |  Package Manager |  Proxy Server |  End Date  
+---|---|---|---|---|---  
+**PHP 8.2 AL2023 version 4.13.0** _64bit Amazon Linux 2023 v4.13.0 running PHP 8.2_ |  2023.11.20260514 |  PHP 8.2.30 |  Composer 2.9.8, PIE 1.4.4 |  nginx 1.30.0 (default), Apache 2.4.66 |  2027-03-31  
+  
+For information about current platform versions, see [PHP](./platforms-supported.html#platforms-supported.PHP).
+
@@ -110 +156 @@ Platform Version and _Solution Stack Name_ |  AMI |  Language |  Package Manager
-**Python 3.9 AL2023 version 4.12.3** _64bit Amazon Linux 2023 v4.12.3 running Python 3.9_ |  2023.11.20260505 |  Python 3.9.25 |  pip 26.0.1, pipenv 2025.0.4 |  3.6.2 |  nginx 1.28.3 (default), Apache 2.4.66 |  2026-07-31  
+**Python 3.9 AL2023 version 4.13.0** _64bit Amazon Linux 2023 v4.13.0 running Python 3.9_ |  2023.11.20260514 |  Python 3.9.25 |  pip 26.0.1, pipenv 2025.0.4 |  3.6.2 |  nginx 1.30.0 (default), Apache 2.4.66 |  2026-07-31  
@@ -120 +166 @@ Platform Version and _Solution Stack Name_ |  AMI |  Language |  Package Manager
-**Ruby 3.2 AL2023 version 4.13.1** _64bit Amazon Linux 2023 v4.13.1 running Ruby 3.2_ |  2023.11.20260505 |  Ruby 3.2.8 |  RubyGems 3.4.19 |  Puma 8.0.1 |  3.6.2 |  nginx 1.28.3 |  2026-07-31  
+**Ruby 3.2 AL2023 version 4.14.0** _64bit Amazon Linux 2023 v4.14.0 running Ruby 3.2_ |  2023.11.20260514 |  Ruby 3.2.8 |  RubyGems 3.4.19 |  Puma 8.0.1 |  3.6.2 |  nginx 1.30.0 |  2026-07-31