LaunchConfigurationReferences

asg-resources.yml

ASGInstanceProfile:
  Type: AWS::IAM::InstanceProfile
  Properties:
  InstanceProfileName: AGInstanceProfile
    Roles:
      - !Ref ASGRole

ASGRole:
  Type: AWS::IAM::Role
  Properties:
    AssumeRolePolicyDocument:
      Version: '2012-10-17'
      Statement:
        - Effect: Allow
          Principal:
            Service:
              - ec2.amazonaws.com
          Action:
            - sts:AssumeRole
    Path: '/'
    ManagedPolicyArns:
      - arn:aws:iam::aws:policy/CloudWatchAgentAdminPolicy
    RoleName: ASGRole

ASGSG:
  Type: AWS::EC2::SecurityGroup
  Properties:
    GroupDescription: Security Group for Bastion Host to allow SSH
    SecurityGroupIngress:
      - IpProtocol: tcp
        FromPort: 22
        ToPort: 22
        CidrIp: 0.0.0.0/0