⭐ Create AWS resource aws.ec2.instances {iamInstanceProfile}

providers/aws/resources/aws.lr

@@ -711,6 +711,7 @@ aws.iam {
   virtualMfaDevices() []aws.iam.virtualmfadevice
   // List of server certificates stored in IAM
   serverCertificates() []dict
+  instanceProfiles() []aws.iam.instanceProfile
 }
 
 // Entry in AWS IAM credential report
@@ -797,6 +798,22 @@ private aws.iam.user @defaults("arn name") {
   loginProfile() aws.iam.loginProfile
 }
 
+// AWS IAM instance profile
+private aws.iam.instanceProfile @defaults("arn instanceProfileId") {
+  // ARN of the IAM instance profile
+  arn string
+  // Time when the instance profile was created
+  createDate time
+  // ID of the IAM instance profile
+  instanceProfileId string
+  // Name of the instance profile
+  instanceProfileName string
+  // Tags of the instance profile
+  tags map[string]string
+  // role attached to the instanceProfile
+  iamRoles() []aws.iam.role
+}
+
 // AWS IAM login profile for a user
 private aws.iam.loginProfile @defaults("createdAt") {
   // Time when the login profile was created
@@ -3014,6 +3031,8 @@ private aws.ec2.instance @defaults("instanceId region state instanceType archite
   instanceType string
   // Tags on the instance
   tags map[string]string
+  // Instance profile of the instance
+  iamInstanceProfile() aws.iam.instanceProfile
   // Image that was used for the instance
   image() aws.ec2.image
   // Launch time of the instance

providers/aws/resources/aws.lr.manifest.yaml

@@ -982,6 +982,7 @@ resources:
       httpTokens: {}
       hypervisor:
         min_mondoo_version: 9.0.0
+      iamInstanceProfile: {}
       image: {}
       instanceId: {}
       instanceLifecycle:
@@ -1893,6 +1894,8 @@ resources:
       attachedPolicies: {}
       credentialReport: {}
       groups: {}
+      instanceProfiles:
+        min_mondoo_version: 9.0.0
       policies: {}
       roles: {}
       serverCertificates: {}
@@ -2003,6 +2006,20 @@ resources:
     platform:
       name:
       - aws
+  aws.iam.instanceProfile:
+    fields:
+      arn: {}
+      createDate: {}
+      iamRole: {}
+      iamRoles: {}
+      instanceProfileId: {}
+      instanceProfileName: {}
+      tags: {}
+    is_private: true
+    min_mondoo_version: 9.0.0
+    platform:
+      name:
+      - aws
   aws.iam.loginProfile:
     fields:
       createdAt: {}