in src/constructs/iam/roles/instance-role.ts [43:64]
constructor(scope: GuStack, props: GuInstanceRolePropsWithApp) {
super(scope, "InstanceRole", {
path: "/",
assumedBy: new ServicePrincipal("ec2.amazonaws.com"),
...props,
});
const sharedPolicies = [
GuSsmSshPolicy.getInstance(scope),
GuDescribeEC2Policy.getInstance(scope),
...(props.withoutLogShipping ? [] : [GuLogShippingPolicy.getInstance(scope)]),
];
const policies = [
...sharedPolicies,
new GuGetDistributablePolicy(scope, props),
new GuParameterStoreReadPolicy(scope, props),
...(props.additionalPolicies ?? []),
];
policies.forEach((p) => p.attachToRole(this));
}