Configure an Amazon EC2 instance to work with CodeDeploy

Sign in to the Amazon Web Services Management Console and open the Amazon EC2 console at https://console.amazonaws.cn/ec2/.

In the navigation pane, under Instances, choose Instances.

Browse to and choose your Amazon EC2 instance in the list.

In the details pane, on the Description tab, note the value in the IAM role field, and then proceed to the next section.

If the field is empty, you can attach an IAM instance profile to the instance. For information, see Attaching an IAM role to an instance.

Open the IAM console at https://console.amazonaws.cn/iam/.

In the navigation pane, choose Roles.

Browse to and choose the IAM role name you noted in step 4 of the previous section.

Choose the Trust Relationships tab. If there is no entry in Trusted Entities that reads The identity provider(s) ec2.amazonaws.com.cn, you cannot use this Amazon EC2 instance. Stop and create an Amazon EC2 instance using the information in Working with instances for CodeDeploy.

If there is an entry that reads The identity provider(s) ec2.amazonaws.com.cn, and you are storing your applications in GitHub repositories only, then skip ahead to Step 3: Tag the Amazon EC2 instance.

If there is an entry that reads The identity provider(s) ec2.amazonaws.com.cn, and you are storing your applications in Amazon S3 buckets, choose the Permissions tab.

If there is a policy in the Permissions policies area, expand the policy, then choose Edit policy.

Choose the JSON tab. If you are storing your applications in Amazon S3 buckets, make sure "s3:Get*" and "s3:List*" are in the list of specified actions.

It may look something like this:

{"Statement":[{"Resource":"*","Action":[
  ... Some actions may already be listed here ...
  "s3:Get*","s3:List*"
  ... Some more actions may already be listed here ...
  ],"Effect":"Allow"}]}

Or it may look something like this:

{
    "Version": "2012-10-17",
    "Statement": [
      {
        "Action": [
          ... Some actions may already be listed here ...
          "s3:Get*",
          "s3:List*"
          ... Some more actions may already be listed here ...
        ],
        ...
      }
    ]
  }

If "s3:Get*" and "s3:List*" are not in the list of specified actions, choose Edit to add them, and then choose Save. (If neither "s3:Get*" or "s3:List*" is the last action in the list, be sure to add a comma after the action, so the policy document validates.)

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "s3:Get*",
                "s3:List*"
            ],
            "Resource": [
                "arn:aws-cn:s3:::amzn-s3-demo-bucket/*",
                "arn:aws-cn:s3:::aws-codedeploy-cn-north-1/*",
                "arn:aws-cn:s3:::aws-codedeploy-cn-northwest-1/*"
            ]
        }
    ]
}