From 99378ac4fe0ea45d2f5d001572728e9a66c3bb93 Mon Sep 17 00:00:00 2001
From: Oleg Avdeev <oleg.v.avdeev@gmail.com>
Date: Thu, 3 Feb 2022 10:33:13 -0800
Subject: [PATCH] add DescribeInstanceStatus permission to the execution role

---
 modules/computation/iam-batch-execution.tf | 1 +
 1 file changed, 1 insertion(+)

diff --git a/modules/computation/iam-batch-execution.tf b/modules/computation/iam-batch-execution.tf
index 3494e18..733cab6 100644
--- a/modules/computation/iam-batch-execution.tf
+++ b/modules/computation/iam-batch-execution.tf
@@ -52,6 +52,7 @@ data "aws_iam_policy_document" "custom_access_policy" {
       "ec2:DescribeAccountAttributes",
       "ec2:DescribeInstances",
       "ec2:DescribeInstanceAttribute",
+      "ec2:DescribeInstanceStatus",
       "ec2:DescribeSubnets",
       "ec2:DescribeSecurityGroups",
       "ec2:DescribeKeyPairs",