I’m trying to create my first Elastic Beanstalk environment in a fresh AWS account (not my first EB, I’ve spun up like a 100 of these things).
In the old days, the Elastic Beanstalk wizard used to create the role (wrapped in an EC Instance Profile) for you to be selected as the ‘EC2 Instance Profile’. In the past few months, I’ve found that that has changed and now you have to create that role manually through the IAM console. The instructions to do this are very clear and found at https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/iam-instanceprofile.html. I’ve followed those instructions successfully in the past.
However, today when I’m trying the same thing, the role that I create does not seem to actually get wrapped as an EC2 Instance Profile. I can create the role and all the permissions and the JSON policy for the ‘Trusted entities’ looks exactly the same as all my other AWS accounts, however the role does not appear in the EB wizard as an option. Notably, the ‘Summary’ section or the created role is missing the ‘Instance profile ARN’.
Here’s a screengrab of the created role, showing the ‘Trusted entities’ tab:
Either I’m missing something really obvious, or whatever was associating IAM Roles with EC2 Instance Profiles in AWS has broken.