Add AWS-managed ssm policy to Ec2InstanceRole

tthyer · tthyer · commit a9f57196ec29 · 2021-01-14T16:46:27.000-08:00
diff --git a/src/templates/cromwell/cromwell-resources.template.yaml b/src/templates/cromwell/cromwell-resources.template.yaml
@@ -222,6 +222,8 @@ Resources:
   Ec2InstanceRole:
     Type: AWS::IAM::Role
     Properties:
+      ManagedPolicyArns:
+        - "arn:aws:iam::aws:policy/AmazonSSMManagedInstanceCore"
       Policies:
         - PolicyName: !Sub CromwellServer-BatchQueue-Access-${AWS::Region}
           PolicyDocument:
