aws-beanstalk-env-executes-as-instance-profile
Beanstalk environment provisions EC2 instances that run as the instance profile role.
match (record)
{
"field": "OptionSettings[aws:autoscaling:launchconfiguration:IamInstanceProfile]",
"resource_type": "AWS::ElasticBeanstalk::Environment"
}
emit
| source type | Compute |
|---|---|
| source | <Elastic Beanstalk environment> |
| target | <instance profile role> |
Narrative
{environment.name} runs its application code on EC2 instances that execute as {role.name} (instance profile).
Raw rule rules/derived/aws/beanstalk.yaml
id: aws-beanstalk-env-executes-as-instance-profile
emits: ExecutesAs
description: Beanstalk environment provisions EC2 instances that run as the instance profile role.
match_record:
resource_type: AWS::ElasticBeanstalk::Environment
field: OptionSettings[aws:autoscaling:launchconfiguration:IamInstanceProfile]
emit:
source_type: Compute
source: <Elastic Beanstalk environment>
target: <instance profile role>
narrative: '{environment.name} runs its application code on EC2 instances that execute as {role.name}
(instance profile).'