Deleted roles are being shown in Instance's IAM Role List

0

The highlighted role "InstanceS3FullAccessRole" is not from my IAM Console and deleted a long back but still appears in this list. When applied, it has no effect which creates confusion. I tried creating new roles and deleting them also removes them from this list but not the "InstanceS3FullAccessRole". Instance IAM Role List Screenshot

How do I get rid of it? Is it a bug?

shubham
gefragt vor 2 Monaten240 Aufrufe
1 Antwort
1
Akzeptierte Antwort

Hello.

I think the instance profile remains.
In EC2, IAM roles are not attached directly, but to a resource called an instance profile.
Therefore, even if the IAM role is deleted, if the instance profile remains, it will be displayed when creating EC2.
https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use_switch-role-ec2_instance-profiles.html

Try finding the instance profile with the AWS CLI command below.
https://awscli.amazonaws.com/v2/documentation/api/latest/reference/iam/list-instance-profiles.html

aws iam list-instance-profiles --query "InstanceProfiles"[]."InstanceProfileName"

If it is not needed, you can delete it using the following command.
https://awscli.amazonaws.com/v2/documentation/api/latest/reference/iam/delete-instance-profile.html

aws iam delete-instance-profile --instance-profile-name InstanceS3FullAccessRole

AWS CLI commands can be executed from CloudShell.
https://docs.aws.amazon.com/cloudshell/latest/userguide/welcome.html

profile picture
EXPERTE
beantwortet vor 2 Monaten
profile pictureAWS
EXPERTE
überprüft vor 2 Monaten

Du bist nicht angemeldet. Anmelden um eine Antwort zu veröffentlichen.

Eine gute Antwort beantwortet die Frage klar, gibt konstruktives Feedback und fördert die berufliche Weiterentwicklung des Fragenstellers.

Richtlinien für die Beantwortung von Fragen