Remove ec2:Describe*

[smoy]

I don't think it's necessary to have ec2:Describe* in the spoke role.

[ghost]

Reacting to plan

IAMbic Summary

Change Detection

• 1 distinct actions.
• 1 templates with changes.
• 4 accounts affected.

Exceptions

• 0 exceptions were recorded.

IAMbic Change Details

Action: Update (Number of Templates: 1)

Template: iambicspokerole.yaml (Number of Accounts: 4)

Account: iambic_test_org_account - (580605962305) (Number of Changes: 1)

Resource ID	Resource Type	Change Type
base_permissions	aws:policy_document	Update

Account: iambic_test_spoke_account_1 - (442632209887) (Number of Changes: 1)

Resource ID	Resource Type	Change Type
base_permissions	aws:policy_document	Update

Account: iambic_test_spoke_account_3 - (333972133479) (Number of Changes: 1)

Resource ID	Resource Type	Change Type
base_permissions	aws:policy_document	Update

Account: iambic_test_spoke_account_2 - (192455039954) (Number of Changes: 1)

Resource ID	Resource Type	Change Type
base_permissions	aws:policy_document	Update

Run