Add SSM session perms to asg cfn

mbailey · mbailey · commit b4a3fd636492 · 2023-12-13T10:11:42.000+11:00
diff --git a/cloudformation/asg.yml b/cloudformation/asg.yml
@@ -64,6 +64,10 @@ Resources:
                   - 'ec2messages:GetMessages'
                   - 'ec2messages:SendReply'
                   - 'cloudwatch:PutMetricData'
+                  - 'ssmmessages:CreateControlChannel'
+                  - 'ssmmessages:CreateDataChannel'
+                  - 'ssmmessages:OpenControlChannel'
+                  - 'ssmmessages:OpenDataChannel'
                 Resource: '*'
 
   SSMInstanceProfile:
