Authentication Type

Select the method to authenticate to your Amazon EC2 instance:

• IAM Role Assumed. Assume the Identity and Access Management (IAM) role associated with the EC2 instance on which this step runs. The IAM role provides a set of temporary credentials to make AWS API requests.

• IAM Security Credentials. Use a security key pair.

To authenticate using IAM security credentials, enter your access key ID. By default, the following property is used:

${p:component/EC2AccessKeyId}

To authenticate using IAM security credentials, enter the corresponding secret key. By default, the following secure property is used:

${p:component/EC2SecretKey}

Specify the AWS service endpoint to use for API requests. An endpoint is a URL that serves as an entry point for an AWS web service. By default, the following property is used:

${p:component/EC2EndPoint}

For details, see the section about AWS service endpoints in the AWS documentation.

Authentication Type

Select the method to authenticate to your Amazon EC2 instance:

• IAM Role Assumed. Assume the Identity and Access Management (IAM) role associated with the EC2 instance on which this step runs. The IAM role provides a set of temporary credentials to make AWS API requests.

• IAM Security Credentials. Use a security key pair.

To authenticate using IAM security credentials, enter your access key ID. By default, the following property is used:

${p:component/EC2AccessKeyId}

To authenticate using IAM security credentials, enter the corresponding secret key. By default, the following secure property is used:

${p:component/EC2SecretKey}

Specify the AWS service endpoint to use for API requests. An endpoint is a URL that serves as an entry point for an AWS web service. By default, the following property is used:

${p:component/EC2EndPoint}

For details, see the section about AWS service endpoints in the AWS documentation.

To create a security group from a file, enter the full path to an XML file containing the security group's allowed IPs/ports.

The file defines the following entries:

<SecurityGroup name="name" description="description" vpcId="id_optional">
   <ipPermission protocol="tcp" fromPort="nn" toPort="nn">
      <ipRange value="0.0.0.0/0"/>
   </ipPermission>
</SecurityGroup>

To create an empty security group, leave this field empty.

Authentication Type

Select the method to authenticate to your Amazon EC2 instance:

• IAM Role Assumed. Assume the Identity and Access Management (IAM) role associated with the EC2 instance on which this step runs. The IAM role provides a set of temporary credentials to make AWS API requests.

• IAM Security Credentials. Use a security key pair.

To authenticate using IAM security credentials, enter your access key ID. By default, the following property is used:

${p:component/EC2AccessKeyId}

To authenticate using IAM security credentials, enter the corresponding secret key. By default, the following secure property is used:

${p:component/EC2SecretKey}

Specify the Elastic Load Balancing endpoint. An endpoint is a URL that serves as an entry point for an AWS web service. By default, the following property is used:

${p:component/LoadBalancerEndPoint}

For details, see the section about Elastic Load Balancing endpoints and quotas in the AWS documentation.

Authentication Type

Select the method to authenticate to your Amazon EC2 instance:

• IAM Role Assumed. Assume the Identity and Access Management (IAM) role associated with the EC2 instance on which this step runs. The IAM role provides a set of temporary credentials to make AWS API requests.

• IAM Security Credentials. Use a security key pair.

To authenticate using IAM security credentials, enter your access key ID. By default, the following property is used:

${p:component/EC2AccessKeyId}

To authenticate using IAM security credentials, enter the corresponding secret key. By default, the following secure property is used:

${p:component/EC2SecretKey}

Specify the Elastic Load Balancing endpoint. An endpoint is a URL that serves as an entry point for an AWS web service. By default, the following property is used:

${p:component/LoadBalancerEndPoint}

For details, see the section about Elastic Load Balancing endpoints and quotas in the AWS documentation.

Authentication Type

Select the method to authenticate to your Amazon EC2 instance:

• IAM Role Assumed. Assume the Identity and Access Management (IAM) role associated with the EC2 instance on which this step runs. The IAM role provides a set of temporary credentials to make AWS API requests.

• IAM Security Credentials. Use a security key pair.

To authenticate using IAM security credentials, enter your access key ID. By default, the following property is used:

${p:component/EC2AccessKeyId}

To authenticate using IAM security credentials, enter the corresponding secret key. By default, the following secure property is used:

${p:component/EC2SecretKey}

Specify the AWS service endpoint to use for API requests. An endpoint is a URL that serves as an entry point for an AWS web service. By default, the following property is used:

${p:component/EC2EndPoint}

For details, see the section about AWS service endpoints in the AWS documentation.

Authentication Type

Select the method to authenticate to your Amazon EC2 instance:

• IAM Role Assumed. Assume the Identity and Access Management (IAM) role associated with the EC2 instance on which this step runs. The IAM role provides a set of temporary credentials to make AWS API requests.

• IAM Security Credentials. Use a security key pair.

To authenticate using IAM security credentials, enter your access key ID. By default, the following property is used:

${p:component/EC2AccessKeyId}

To authenticate using IAM security credentials, enter the corresponding secret key. By default, the following secure property is used:

${p:component/EC2SecretKey}

Specify the AWS service endpoint to use for API requests. An endpoint is a URL that serves as an entry point for an AWS web service. By default, the following property is used:

${p:component/EC2EndPoint}

For details, see the section about AWS service endpoints in the AWS documentation.

(Optional) For additional security, enter the names of security groups to use, separated with commas.

If a security group is not in your default Virtual Private Cloud (VPC), specify the security group ID.

Tags

To add tags to instances, enter each tag on a new line using the following syntax:

key=value

IAM Instance Profile

Specify the instance profile to pass its IAM role to the EC2 instances, for example:

customer-mc-ec2-instance-profile

All EC2 instances launched by this step assume the instance profile's IAM role and inherit its permissions.

Select the method to authenticate to your Amazon EC2 instance:

• IAM Role Assumed. Assume the Identity and Access Management (IAM) role associated with the EC2 instance on which this step runs. The IAM role provides a set of temporary credentials to make AWS API requests.

• IAM Security Credentials. Use a security key pair.

To authenticate using IAM security credentials, enter your access key ID. By default, the following property is used:

${p:component/EC2AccessKeyId}

To authenticate using IAM security credentials, enter the corresponding secret key. By default, the following secure property is used:

${p:component/EC2SecretKey}

Specify the AWS service endpoint to use for API requests. An endpoint is a URL that serves as an entry point for an AWS web service. By default, the following property is used:

${p:component/EC2EndPoint}

For details, see the section about AWS service endpoints in the AWS documentation.

Select the tag action:

• To add new tags or modify existing tags, select create/edit.

• To remove tags, select delete.

Enter the tags to create, edit, or delete. Each tag is a key=value pair, where the tag key is case-sensitive and the tag value is optional.

Specify each tag on a new line using the following syntax:

key=value
key=

If you are deleting tags, you can use this option to remove all tags attached to the specified EC2 instances.

Note: This option works only if you selected delete as the Tag Operation Type.

Authentication Type

Select the method to authenticate to your Amazon EC2 instance:

• IAM Role Assumed. Assume the Identity and Access Management (IAM) role associated with the EC2 instance on which this step runs. The IAM role provides a set of temporary credentials to make AWS API requests.

• IAM Security Credentials. Use a security key pair.

To authenticate using IAM security credentials, enter your access key ID. By default, the following property is used:

${p:component/EC2AccessKeyId}

To authenticate using IAM security credentials, enter the corresponding secret key. By default, the following secure property is used:

${p:component/EC2SecretKey}

Specify the AWS service endpoint to use for API requests. An endpoint is a URL that serves as an entry point for an AWS web service. By default, the following property is used:

${p:component/EC2EndPoint}

For details, see the section about AWS service endpoints in the AWS documentation.

Enter one or more states in which a volume can be removed, separated with commas.

Volume states describe a volume's availability. You can use the following states: creating, available, in-use, deleting, or error. For example, to remove all the volumes attached to an instance or detached from it, enter in-use,available.

Authentication Type

Select the method to authenticate to your Amazon EC2 instance:

• IAM Role Assumed. Assume the Identity and Access Management (IAM) role associated with the EC2 instance on which this step runs. The IAM role provides a set of temporary credentials to make AWS API requests.

• IAM Security Credentials. Use a security key pair.

To authenticate using IAM security credentials, enter your access key ID. By default, the following property is used:

${p:component/EC2AccessKeyId}

To authenticate using IAM security credentials, enter the corresponding secret key. By default, the following secure property is used:

${p:component/EC2SecretKey}

Specify the AWS service endpoint to use for API requests. An endpoint is a URL that serves as an entry point for an AWS web service. By default, the following property is used:

${p:component/EC2EndPoint}

For details, see the section about AWS service endpoints in the AWS documentation.

Authentication Type

Select the method to authenticate to your Amazon EC2 instance:

• IAM Role Assumed. Assume the Identity and Access Management (IAM) role associated with the EC2 instance on which this step runs. The IAM role provides a set of temporary credentials to make AWS API requests.

• IAM Security Credentials. Use a security key pair.

To authenticate using IAM security credentials, enter your access key ID. By default, the following property is used:

${p:component/EC2AccessKeyId}

To authenticate using IAM security credentials, enter the corresponding secret key. By default, the following secure property is used:

${p:component/EC2SecretKey}

Specify the AWS service endpoint to use for API requests. An endpoint is a URL that serves as an entry point for an AWS web service. By default, the following property is used:

${p:component/EC2EndPoint}

For details, see the section about AWS service endpoints in the AWS documentation.

Specify how long the step waits until the instances are in the specified state, in milliseconds.

During the timeout, the step continuously polls for the state of each instance. If an instance changes to the relevant state, the step detects the change and uses the instance.

Enter an alternative absolute path to the working directory for the step.

To use the default working directory for the process, leave the field empty.

Select a custom post-processing script. To run the step's default script, leave the field empty.

To create your custom post-processing script, click Add , and enter script details in the Create Script dialog box.

A post-processing script helps ensure that expected results occur. It runs after a step finishes processing. For details, see Manage post-processing scripts.

Specify properties you want to be treated as secure. Secure properties are stored encrypted, and their values are displayed obscured in the Deployment Automation user interface.

Use regular expressions to select multiple properties. Enter each property name or expression on a new line.

Example: To select all properties with names that start with prop, use this regular expression: prop.*

If the operation fails, specify how many times Deployment Automation attempts to retry the operation.

Default: 50 attempts

Enter the maximum time interval between failed attempts, in seconds.

The initial timeout is one second. With every failed attempt, the timeout is doubled until it reaches the maximum value you specified.

Default: 30 seconds