AWS IAM and Elastic Beanstalk

When an Elastic Beanstalk application is created through the AWS Management Console, and IAM profile is created specifically for the application. This role can be reused for other EB apps.

Similarly, if a sample application is created (Elastic Beanstalk Applications > Create New Application), either a new IAM role is created for the app, or any IAM roles created for previous Elastic Beanstalk applications can be reused for new applications.

While creating the Elastic Beanstalk application, at the Permissions stage

• Instance profile: aws-elasticbeanstalk-ec2-role
• Service role: aws-elasticbeanstalk-service-role or Create a new service role

If Create a new service role` is selected on the next page, the role name is specified on the next page.

Notes

See also

• IAM Business Use Cases - AWS Identity and Management User Guide
• Using Elastic Beanstalk with AWS Identity and Access Management - AWS Elastic Beanstalk Developer Guide, API Version 2010-12-01