Deleted roles are being shown in Instance's IAM Role List

0

The highlighted role "InstanceS3FullAccessRole" is not from my IAM Console and deleted a long back but still appears in this list. When applied, it has no effect which creates confusion. I tried creating new roles and deleting them also removes them from this list but not the "InstanceS3FullAccessRole". Instance IAM Role List Screenshot

How do I get rid of it? Is it a bug?

shubham
demandé il y a 2 mois240 vues
1 réponse
1
Réponse acceptée

Hello.

I think the instance profile remains.
In EC2, IAM roles are not attached directly, but to a resource called an instance profile.
Therefore, even if the IAM role is deleted, if the instance profile remains, it will be displayed when creating EC2.
https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use_switch-role-ec2_instance-profiles.html

Try finding the instance profile with the AWS CLI command below.
https://awscli.amazonaws.com/v2/documentation/api/latest/reference/iam/list-instance-profiles.html

aws iam list-instance-profiles --query "InstanceProfiles"[]."InstanceProfileName"

If it is not needed, you can delete it using the following command.
https://awscli.amazonaws.com/v2/documentation/api/latest/reference/iam/delete-instance-profile.html

aws iam delete-instance-profile --instance-profile-name InstanceS3FullAccessRole

AWS CLI commands can be executed from CloudShell.
https://docs.aws.amazon.com/cloudshell/latest/userguide/welcome.html

profile picture
EXPERT
répondu il y a 2 mois
profile pictureAWS
EXPERT
vérifié il y a 2 mois

Vous n'êtes pas connecté. Se connecter pour publier une réponse.

Une bonne réponse répond clairement à la question, contient des commentaires constructifs et encourage le développement professionnel de la personne qui pose la question.

Instructions pour répondre aux questions