Using service-linked roles for Elastic Beanstalk

AWS Elastic Beanstalk uses AWS Identity and Access Management (IAM) service-linked roles. A service-linked role is a unique type of IAM role that is linked directly to Elastic Beanstalk. Service-linked roles are predefined by Elastic Beanstalk and include all the permissions that the service requires to call other AWS services on your behalf.

Elastic Beanstalk defines a few types of service-linked roles:

  • Monitoring service-linked role – Allows Elastic Beanstalk to monitor the health of running environments and publish health event notifications.

  • Maintenance service-linked role – Allows Elastic Beanstalk to perform regular maintenance activities for your running environments.

  • Managed-updates service-linked role – Allows Elastic Beanstalk to perform scheduled platform updates of your running environments.