Predictive scaling service-linked role
AWS Auto Scaling uses service-linked roles for the permissions that it requires to call other AWS on your behalf when you work with a scaling plan. For more information, see Service-linked roles for scaling plans.
The following sections describe how to create and manage the service-linked role for predictive scaling. Start by configuring permissions to allow an IAM entity (such as a user, group, or role) to create, edit, or delete a service-linked role.
Permissions granted by the service-linked role
AWS Auto Scaling uses the service-linked role named AWSServiceRoleForAutoScalingPlans_EC2AutoScaling to call other AWS services on your behalf when you enable predictive scaling.
AWSServiceRoleForAutoScalingPlans_EC2AutoScaling trusts
the autoscaling-plans.amazonaws.com service to assume the role.
This service-linked role uses the managed policy AWSAutoScalingPlansEC2AutoScalingPolicy. To view the permissions for this policy, see AWSAutoScalingPlansEC2AutoScalingPolicy in the AWS Managed Policy Reference.
Create the service-linked role (automatic)
You don't need to manually create the AWSServiceRoleForAutoScalingPlans_EC2AutoScaling role. AWS creates this role for you when you create a scaling plan in your account and enable predictive scaling.
For AWS to create a service-linked role on your behalf, you must have the required permissions. For more information, see Service-linked role permissions in the IAM User Guide.
Create the service-linked role (manual)
To create the service-linked role manually, you can use the IAM console, IAM CLI, or IAM API. For more information, see Create a service-linked role in the IAM User Guide.
To create a service-linked role (AWS CLI)
Use the following create-service-linked-role
aws iam create-service-linked-role --aws-service-name autoscaling-plans.amazonaws.com
Edit the service-linked role
You can edit the description of AWSServiceRoleForAutoScalingPlans_EC2AutoScaling using IAM. For more information, see Edit a service-linked role description in the IAM User Guide.
Delete the service-linked role
If you no longer need to use scaling plans, we recommend that you delete AWSServiceRoleForAutoScalingPlans_EC2AutoScaling.
You can delete a service-linked role only after you delete all scaling plans in your AWS account that have predictive scaling enabled. This ensures that you can't inadvertently remove permissions to access your scaling plans.
You can use the IAM console, IAM CLI, or IAM API to delete the service-linked role. For more information, see Delete a service-linked role in the IAM User Guide.
After you delete the AWSServiceRoleForAutoScalingPlans_EC2AutoScaling service-linked role, AWS Auto Scaling creates the role again if you create a scaling plan with predictive scaling enabled.
Supported Regions
AWS Auto Scaling supports using service-linked roles in all of the AWS Regions where scaling plans available. For information about the Regional availability of scaling plans, see AWS Auto Scaling endpoints and quotas in the AWS General Reference.
