All checks
High ElasticBeanstalk · regional

Elastic Beanstalk managed platform updates should be enabled

Ensures managed platform updates are enabled for Elastic Beanstalk environments, so AWS applies platform updates in a weekly maintenance window.

service
ElasticBeanstalk
severity
High
scope
evaluated in every region

How to fix it

In the console

Elastic Beanstalk → Environments → the environment → Configuration → Updates, monitoring, and logging

With the AWS CLI

aws elasticbeanstalk update-environment --environment-name <environment-name> --option-settings Namespace=aws:elasticbeanstalk:healthreporting:system,OptionName=SystemType,Value=enhanced Namespace=aws:elasticbeanstalk:managedactions,OptionName=ManagedActionsEnabled,Value=true Namespace=aws:elasticbeanstalk:managedactions,OptionName=PreferredStartTime,Value=<day:hour:minute> Namespace=aws:elasticbeanstalk:managedactions:platformupdate,OptionName=UpdateLevel,Value=<patch-or-minor> --region <region>

With Terraform

resource "aws_elastic_beanstalk_environment" "this" {
  name        = var.environment_name
  application = var.application_name

  setting {
    namespace = "aws:elasticbeanstalk:healthreporting:system"
    name      = "SystemType"
    value     = "enhanced"
  }

  setting {
    namespace = "aws:elasticbeanstalk:managedactions"
    name      = "ManagedActionsEnabled"
    value     = "true"
  }

  setting {
    namespace = "aws:elasticbeanstalk:managedactions"
    name      = "PreferredStartTime"
    value     = var.preferred_start_time
  }

  setting {
    namespace = "aws:elasticbeanstalk:managedactions:platformupdate"
    name      = "UpdateLevel"
    value     = var.update_level
  }
}

See which of your accounts this check is failing on.

Book a demo