1. Login to your AWS Management Console.
2. Navigate to the EC2 dashboard.
3. Select the EC2 instance for which you want to remediate the misconfiguration.
4. Click on the “Actions” dropdown menu and select “Instance Settings” and then click on “Attach/Replace IAM Role”.
5. In the “Attach/Replace IAM Role” window, select the IAM role that you want to attach to the EC2 instance.
6. Click on the “Apply” button to attach the selected IAM role to the EC2 instance.

​

1. Create an IAM role with the required permissions that the EC2 instance needs. You can create this role using the AWS CLI command “aws iam create-role”.
2. Attach the required policies to the IAM role. You can attach policies using the AWS CLI command “aws iam attach-role-policy”.
3. Launch an EC2 instance and specify the IAM role created in step 1. You can do this using the AWS CLI command “aws ec2 run-instances” with the parameter “—iam-instance-profile”.
4. Verify that the IAM role is being used by the EC2 instance by logging into the instance and running the command “curl http://169.254.169.254/latest/meta-data/iam/info”. This command should return the IAM role ARN.
5. Once verified, you can remove any access keys that were previously used by the EC2 instance. You can do this using the AWS CLI command “aws ec2 delete-key-pair”.

1. First, we need to create an IAM role that has the necessary permissions for our EC2 instances. We can do this using the boto3 library in Python. Here’s an example:

import boto3

iam = boto3.client('iam')

response = iam.create_role(
    RoleName='EC2-Role',
    AssumeRolePolicyDocument={
        'Version': '2012-10-17',
        'Statement': [
            {
                'Effect': 'Allow',
                'Principal': {
                    'Service': 'ec2.amazonaws.com'
                },
                'Action': 'sts:AssumeRole'
            }
        ]
    }
)

# Attach necessary policies to the role
iam.attach_role_policy(
    RoleName='EC2-Role',
    PolicyArn='arn:aws:iam::aws:policy/AmazonS3FullAccess'
)

2. Once the IAM role is created, we can assign it to our EC2 instances. We can do this by launching new instances with the --iam-instance-profile parameter or by modifying existing instances with the modify_instance_attribute method in the boto3 library.

import boto3

ec2 = boto3.client('ec2')

# Launch new instances with IAM role
response = ec2.run_instances(
    ImageId='ami-0c55b159cbfafe1f0',
    InstanceType='t2.micro',
    MinCount=1,
    MaxCount=1,
    IamInstanceProfile={
        'Arn': 'arn:aws:iam::123456789012:instance-profile/EC2-Role'
    }
)

# Modify existing instances with IAM role
response = ec2.modify_instance_attribute(
    InstanceId='i-0123456789abcdef0',
    IamInstanceProfile={
        'Arn': 'arn:aws:iam::123456789012:instance-profile/EC2-Role'
    }
)