What is the difference between an EC2 IAM role and an instance profile?

What is the difference between an EC2 IAM role and an instance profile?

An EC2 IAM role is a set of permissions that define what actions can be performed on AWS resources. An instance profile, on the other hand, is a container for an IAM role that allows EC2 instances to use the role's permissions.

Can you give me an example of when to use an instance profile?

Sure! You would use an instance profile when you launch an EC2 instance and want it to have permissions to access other AWS services, like S3 or DynamoDB, without embedding credentials in your application.

Are there any limitations to using IAM roles with EC2?

Yes, one limitation is that IAM roles can only be assigned to EC2 instances at launch time. You cannot change the role of a running instance without stopping and restarting it.

How do I create an IAM role for my EC2 instance?

You can create an IAM role in the AWS Management Console by navigating to the IAM service, selecting 'Roles', and then 'Create role'. Choose 'EC2' as the trusted entity and attach the necessary policies.