Merge pull request #989 from jeremiahsnapp/jsnapp/fix-DescribeAutoScalingInstances-IAM-policy

autoscaling:DescribeAutoScalingInstances can only be applied to all resources

Author: pda

templates/aws-stack.yml

@@ -826,14 +826,14 @@ Resources:
             - !Ref AWS::NoValue
           - Effect: Allow
             Action:
+              - autoscaling:DescribeAutoScalingInstances
               - cloudwatch:PutMetricData
               - cloudformation:DescribeStackResource
               - ec2:DescribeTags
             Resource: "*"
           - Sid: TerminateInstance
             Effect: Allow
             Action:
-              - autoscaling:DescribeAutoScalingInstances
               - autoscaling:SetInstanceHealth
               - autoscaling:TerminateInstanceInAutoScalingGroup
             Resource: !Sub arn:${AWS::Partition}:autoscaling:${AWS::Region}:${AWS::AccountId}:autoScalingGroup:*:autoScalingGroupName/${AWS::StackName}-AgentAutoScaleGroup-*