diff --git a/source/constructs/lib/cfn-step-functions.ts b/source/constructs/lib/cfn-step-functions.ts index 80d2ed2..91c82f4 100644 --- a/source/constructs/lib/cfn-step-functions.ts +++ b/source/constructs/lib/cfn-step-functions.ts @@ -202,6 +202,7 @@ export class CloudFormationStateMachine extends cdk.Construct { "ecs:ListTasks", "ecs:RegisterTaskDefinition", "ecs:DeregisterTaskDefinition", + "ecs:DescribeTaskDefinition", ], resources: [`*`] }), @@ -321,6 +322,14 @@ export class CloudFormationStateMachine extends cdk.Construct { ], resources: [`*`] }), + new iam.PolicyStatement({ + actions: [ + "iam:CreateServiceLinkedRole", + ], + resources: [ + `arn:${cdk.Aws.PARTITION}:iam::${cdk.Aws.ACCOUNT_ID}:role/aws-service-role/autoscaling.amazonaws.com/AWSServiceRoleForAutoScaling` + ] + }), ] });