To provide finer grain control over what instances RedLine13 can start, stop, terminate we have added support for launching EC2 load agents with instance profiles.

Advanced Topic

This is an advanced topic and only supported for enterprise customers.

You can read the AWS Blog Post on Restricting with IAM Policy and instance-profiles.

To get started you must set up an instance profile, which is documented at “How to create IAM instance Profile“.

Setting up Policy

To use this feature you will have to update your policy.   Add

"iam:PassRole",

to the section that gives permission to the RedLine13 role.

Then limit the ability to stop or terminate your instances by using a condition:

{
    "Action": [
        "ec2:StopInstances",
        "ec2:TerminateInstances"
    ],
    "Effect": "Allow",
    "Resource": "*",
    "Condition": {
        "StringEquals": {
            "ec2:InstanceProfile": "arn:aws:iam::ACCOUNT:instance-profile/INSTANCE_PROFILE_NAME"
        }
    }
}

For a list of all permissions we require and detailed full policy you can read our Key Setup Instructions.

Using in RedLine Load Tests

This plugin is available for all tests, but you can setup defaults for your account.

a) Go to account settings: https://www.redline13.com/Account/settings

b) Configure your instance profile name or instance profile ARN

• By selecting this checkbox, this instance-profile will be configured by default for every test.

c) Override or turn on during load test start.

This feature furthers our approach to giving users fine grain control and limiting our access to launching and terminating only RedLine13 load agents.