iam-permissions

{
  "Statement": [
    {
      "Action": [
        "autoscaling:*"
      ],
      "Resource": [
        "*"
      ],
      "Effect": "Allow"
    },
    {
      "Action": [
        "cloudwatch:DescribeAlarms"
      ],
      "Resource": [
        "*"
      ],
      "Effect": "Allow"
    },
    {
      "Action": [
        "ec2:DescribeAvailabilityZones",
        "ec2:DescribeKeyPairs",
        "ec2:DescribeRegions",
        "ec2:DescribeSecurityGroups"
      ],
      "Resource": [
        "*"
      ],
      "Effect": "Allow"
    },
    {
      "Action": [
        "iam:PassRole"
      ],
      "Resource": [
        "arn:aws:iam::[Account Number]:role/[Role Name]"
      ],
      "Effect": "Allow"
    },
    {
      "Action": [
        "iam:AddRoleToInstanceProfile"
      ],
      "Resource": [
        "arn:aws:iam::[Account Number]:instance-profile/[Role Name]"
      ],
      "Effect": "Allow"
    },
    {
      "Action": [
        "cloudwatch:PutMetricData"
      ],
      "Resource": [
        "*"
      ],
      "Effect": "Allow"
    }
  ]
}