Elastic Beanstalk managed platform updates should be enabled
Ensures managed platform updates are enabled for Elastic Beanstalk environments, so AWS applies platform updates in a weekly maintenance window.
- service
- ElasticBeanstalk
- severity
- High
- scope
- evaluated in every region
How to fix it
In the console
Elastic Beanstalk → Environments → the environment → Configuration → Updates, monitoring, and logging
With the AWS CLI
aws elasticbeanstalk update-environment --environment-name <environment-name> --option-settings Namespace=aws:elasticbeanstalk:healthreporting:system,OptionName=SystemType,Value=enhanced Namespace=aws:elasticbeanstalk:managedactions,OptionName=ManagedActionsEnabled,Value=true Namespace=aws:elasticbeanstalk:managedactions,OptionName=PreferredStartTime,Value=<day:hour:minute> Namespace=aws:elasticbeanstalk:managedactions:platformupdate,OptionName=UpdateLevel,Value=<patch-or-minor> --region <region>With Terraform
resource "aws_elastic_beanstalk_environment" "this" {
name = var.environment_name
application = var.application_name
setting {
namespace = "aws:elasticbeanstalk:healthreporting:system"
name = "SystemType"
value = "enhanced"
}
setting {
namespace = "aws:elasticbeanstalk:managedactions"
name = "ManagedActionsEnabled"
value = "true"
}
setting {
namespace = "aws:elasticbeanstalk:managedactions"
name = "PreferredStartTime"
value = var.preferred_start_time
}
setting {
namespace = "aws:elasticbeanstalk:managedactions:platformupdate"
name = "UpdateLevel"
value = var.update_level
}
}
See which of your accounts this check is failing on.
Book a demo