fix: merge pull request #62 from mang0kitty, solve asg IAM permission…

… issues
aws-solutions · Sep 26, 2021 · 24f1d4d · 24f1d4d
1 parent 65e3886
commit 24f1d4d
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/source/constructs/lib/cfn-step-functions.ts b/source/constructs/lib/cfn-step-functions.ts
@@ -202,6 +202,7 @@ export class CloudFormationStateMachine extends cdk.Construct {
             "ecs:ListTasks",
             "ecs:RegisterTaskDefinition",
             "ecs:DeregisterTaskDefinition",
+            "ecs:DescribeTaskDefinition",
           ],
           resources: [`*`]
         }),
@@ -321,6 +322,14 @@ export class CloudFormationStateMachine extends cdk.Construct {
           ],
           resources: [`*`]
         }),
+        new iam.PolicyStatement({
+          actions: [
+            "iam:CreateServiceLinkedRole",
+          ],
+          resources: [
+            `arn:${cdk.Aws.PARTITION}:iam::${cdk.Aws.ACCOUNT_ID}:role/aws-service-role/autoscaling.amazonaws.com/AWSServiceRoleForAutoScaling`
+          ]
+        }),
       ]
     });