I eventually got this to work after a while. I had to create two roles manually, a service role and an instance role both with the following policies. AWSElasticBeanstalkMulticontainerDocker AWSElasticBeanstalkWebTier AWSElasticBeanstalkWorkerTier
AWSElasticBeanstalkManagedUpdatesCustomerRolePolicy (for the service role only or you will get a warning after environment creation)
See screenshots below ...