Merge pull request #1192 from philnielsen/philnielsen/add-missing-service-role-permissions

Author: triarius

templates/service-role.yml

@@ -181,7 +181,8 @@ Resources:
                 "lambda:RemovePermission",
                 "lambda:DeleteFunction",
                 "lambda:InvokeFunction",
-                "lambda:TagResource"
+                "lambda:TagResource",
+                "lambda:UpdateFunctionConfiguration"
               ],
               "Resource": "arn:aws:lambda:*:*:function:*"
             },
@@ -276,13 +277,15 @@ Resources:
                 "autoscaling:DescribeScalingProcessTypes",
                 "autoscaling:DescribeScheduledActions",
                 "autoscaling:DescribeAutoScalingGroups",
+                "autoscaling:DescribeAutoScalingInstances",
                 "autoscaling:DescribeLifecycleHooks",
                 "autoscaling:SetDesiredCapacity",
                 "autoscaling:PutLifecycleHook",
                 "autoscaling:DeleteLifecycleHook",
                 "autoscaling:SetInstanceProtection",
                 "autoscaling:CreateAutoScalingGroup",
                 "autoscaling:EnableMetricsCollection",
+                "autoscaling:DisableMetricsCollection",
                 "autoscaling:UpdateAutoScalingGroup",
                 "autoscaling:DeleteAutoScalingGroup",
                 "autoscaling:PutScalingPolicy",