fix: merge pull request #62 from mang0kitty, solve asg IAM permission issues

Author: YikaiHu

source/constructs/lib/cfn-step-functions.ts

@@ -202,6 +202,7 @@ export class CloudFormationStateMachine extends cdk.Construct {
             "ecs:ListTasks",
             "ecs:RegisterTaskDefinition",
             "ecs:DeregisterTaskDefinition",
+            "ecs:DescribeTaskDefinition",
           ],
           resources: [`*`]
         }),
@@ -321,6 +322,14 @@ export class CloudFormationStateMachine extends cdk.Construct {
           ],
           resources: [`*`]
         }),
+        new iam.PolicyStatement({
+          actions: [
+            "iam:CreateServiceLinkedRole",
+          ],
+          resources: [
+            `arn:${cdk.Aws.PARTITION}:iam::${cdk.Aws.ACCOUNT_ID}:role/aws-service-role/autoscaling.amazonaws.com/AWSServiceRoleForAutoScaling`
+          ]
+        }),
       ]
     });