setting-up-ec2-instance-profiles
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- AWS CLI Command Execution: The skill utilizes various
awsCLI commands (such asaws ec2andaws iam) to inspect, create, and modify AWS resources. These operations are core to the skill's purpose of managing IAM roles and instance profiles. - Metadata Service Interaction: The instructions include the use of
curlto interact with the EC2 Instance Metadata Service (IMDSv2) at the link-local address169.254.169.254. This is the standard, secure method for verifying temporary credentials on EC2 instances. - Sensitive Configuration Management: The skill proactively advises users to remove hardcoded credentials from environment variables and sensitive files like
~/.aws/credentialsonce the instance profile is configured, which is a recommended security improvement. - IAM Policy Management: The skill facilitates the creation and attachment of IAM roles and policies. The SOP emphasizes the principle of least privilege by recommending custom, resource-specific policies instead of broad managed policies.
Audit Metadata