Elastic Beanstalk managed platform updates should be enabled

How to fix it

• Affects another check: Setting health reporting to Enhanced also clears ElasticBeanstalk.1 for this environment.

In the console

Elastic Beanstalk → Environments → the environment → Configuration → Updates, monitoring, and logging

Health reporting → System

Enhanced, first if it is Basic: managed updates require it

Managed updates

Activated

Weekly update window

A time when replacing instances is acceptable

Update level

Minor and patch, or Patch (either passes)

With the AWS CLI

aws elasticbeanstalk update-environment --environment-name <environment-name> --option-settings Namespace=aws:elasticbeanstalk:healthreporting:system,OptionName=SystemType,Value=enhanced Namespace=aws:elasticbeanstalk:managedactions,OptionName=ManagedActionsEnabled,Value=true Namespace=aws:elasticbeanstalk:managedactions,OptionName=PreferredStartTime,Value=<day:hour:minute> Namespace=aws:elasticbeanstalk:managedactions:platformupdate,OptionName=UpdateLevel,Value=<patch-or-minor> --region <region>

With Terraform

resource "aws_elastic_beanstalk_environment" "this" {
  name        = var.environment_name
  application = var.application_name

  setting {
    namespace = "aws:elasticbeanstalk:healthreporting:system"
    name      = "SystemType"
    value     = "enhanced"
  }

  setting {
    namespace = "aws:elasticbeanstalk:managedactions"
    name      = "ManagedActionsEnabled"
    value     = "true"
  }

  setting {
    namespace = "aws:elasticbeanstalk:managedactions"
    name      = "PreferredStartTime"
    value     = var.preferred_start_time
  }

  setting {
    namespace = "aws:elasticbeanstalk:managedactions:platformupdate"
    name      = "UpdateLevel"
    value     = var.update_level
  }
}