⭐ Create AWS resource aws.ec2.instances {iamInstanceProfile}

providers/aws/resources/aws.lr

@@ -3014,6 +3014,8 @@ private aws.ec2.instance @defaults("instanceId region state instanceType archite
   instanceType string
   // Tags on the instance
   tags map[string]string
+  // Instance profile of the instance.
+  iamInstanceProfile() dict
   // Image that was used for the instance
   image() aws.ec2.image
   // Launch time of the instance

providers/aws/resources/aws.lr.manifest.yaml

@@ -982,6 +982,7 @@ resources:
       httpTokens: {}
       hypervisor:
         min_mondoo_version: 9.0.0
+      iamInstanceProfile: {}
       image: {}
       instanceId: {}
       instanceLifecycle:

providers/aws/resources/aws_ec2.go

@@ -867,6 +867,12 @@ func (a *mqlAwsEc2) gatherInstanceInfo(instances []ec2types.Reservation, regionV
 			if err != nil {
 				return nil, err
 			}
+
+			iamInstanceProfile, err := convert.JsonToDict(instance.IamInstanceProfile)
+			if err != nil {
+				return nil, err
+			}
+
 			var stateTransitionTime time.Time
 			reg := regexp.MustCompile(`.*\((\d{4}-\d{2}-\d{2}\s\d{2}:\d{2}:\d{2}) GMT\)`)
 			timeString := reg.FindStringSubmatch(convert.ToString(instance.StateTransitionReason))
@@ -899,6 +905,7 @@ func (a *mqlAwsEc2) gatherInstanceInfo(instances []ec2types.Reservation, regionV
 				"rootDeviceType":        llx.StringData(string(instance.RootDeviceType)),
 				"state":                 llx.StringData(string(instance.State.Name)),
 				"stateReason":           llx.MapData(stateReason, types.Any),
+				"iamInstanceProfile":    llx.MapData(iamInstanceProfile, types.Any),
 				"stateTransitionReason": llx.StringDataPtr(instance.StateTransitionReason),
 				"stateTransitionTime":   llx.TimeData(stateTransitionTime),
 				"tags":                  llx.MapData(Ec2TagsToMap(instance.Tags), types.String),
@@ -1310,6 +1317,35 @@ func (a *mqlAwsEc2Instance) instanceStatus() (interface{}, error) {
 	return res, nil
 }
 
+func (a *mqlAwsEc2Instance) iamInstanceProfile() (interface{}, error) {
+	var res interface{}
+	instanceId := a.InstanceId.Data
+	region := a.Region.Data
+	conn := a.MqlRuntime.Connection.(*connection.AwsConnection)
+
+	svc := conn.Ec2(region)
+	ctx := context.Background()
+
+	instanceStatus, err := svc.DescribeInstanceStatus(ctx, &ec2.DescribeInstanceStatusInput{
+		InstanceIds:         []string{instanceId},
+		IncludeAllInstances: aws.Bool(true),
+	})
+	if err != nil {
+		return nil, err
+	}
+
+	if len(instanceStatus.InstanceStatuses) > 0 {
+		if instanceId == convert.ToString(instanceStatus.InstanceStatuses[0].InstanceId) {
+			res, err = convert.JsonToDict(instanceStatus.InstanceStatuses[0])
+			if err != nil {
+				return nil, err
+			}
+		}
+	}
+
+	return res, nil
+}
+
 func (a *mqlAwsEc2) volumes() ([]interface{}, error) {
 	conn := a.MqlRuntime.Connection.(*connection.AwsConnection)
 	res := []interface{}{}