Deleted roles are being shown in Instance's IAM Role List

0

The highlighted role "InstanceS3FullAccessRole" is not from my IAM Console and deleted a long back but still appears in this list. When applied, it has no effect which creates confusion. I tried creating new roles and deleting them also removes them from this list but not the "InstanceS3FullAccessRole". Instance IAM Role List Screenshot

How do I get rid of it? Is it a bug?

shubham
asked 6 months ago409 views
1 Answer
1
Accepted Answer

Hello.

I think the instance profile remains.
In EC2, IAM roles are not attached directly, but to a resource called an instance profile.
Therefore, even if the IAM role is deleted, if the instance profile remains, it will be displayed when creating EC2.
https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use_switch-role-ec2_instance-profiles.html

Try finding the instance profile with the AWS CLI command below.
https://awscli.amazonaws.com/v2/documentation/api/latest/reference/iam/list-instance-profiles.html

aws iam list-instance-profiles --query "InstanceProfiles"[]."InstanceProfileName"

If it is not needed, you can delete it using the following command.
https://awscli.amazonaws.com/v2/documentation/api/latest/reference/iam/delete-instance-profile.html

aws iam delete-instance-profile --instance-profile-name InstanceS3FullAccessRole

AWS CLI commands can be executed from CloudShell.
https://docs.aws.amazon.com/cloudshell/latest/userguide/welcome.html

profile picture
EXPERT
answered 6 months ago
profile pictureAWS
EXPERT
reviewed 6 months ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions