From 604042cea9b23b3dda7d181753d3a82c78e0fff3 Mon Sep 17 00:00:00 2001
From: Luke Young <91491244+lyoung-confluent@users.noreply.github.com>
Date: Mon, 28 Jul 2025 14:43:21 -0700
Subject: [PATCH 1/4] fix: replace AmazonEC2RoleforSSM with
 AmazonSSMManagedInstanceCore

---
 lib/aws-semaphore-agent-stack.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lib/aws-semaphore-agent-stack.js b/lib/aws-semaphore-agent-stack.js
index 7c3a8d2..5906e62 100644
--- a/lib/aws-semaphore-agent-stack.js
+++ b/lib/aws-semaphore-agent-stack.js
@@ -160,7 +160,7 @@ class AwsSemaphoreAgentStack extends Stack {
 
   getInstanceProfileRoleManagedPolicies() {
     let managedPolicies = [
-      ManagedPolicy.fromAwsManagedPolicyName('service-role/AmazonEC2RoleforSSM')
+      ManagedPolicy.fromAwsManagedPolicyName('service-role/AmazonSSMManagedInstanceCore')
     ];
 
     if (!this.argumentStore.isEmpty("SEMAPHORE_AGENT_MANAGED_POLICY_NAMES")) {

From aeb774ef5f148eaf5847d5ef5f338a22bdd104a8 Mon Sep 17 00:00:00 2001
From: Luke Young <91491244+lyoung-confluent@users.noreply.github.com>
Date: Mon, 28 Jul 2025 15:51:50 -0700
Subject: [PATCH 2/4] Update aws-semaphore-agent.test.js

---
 test/aws-semaphore-agent.test.js | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/test/aws-semaphore-agent.test.js b/test/aws-semaphore-agent.test.js
index aadfeb9..6a471ce 100644
--- a/test/aws-semaphore-agent.test.js
+++ b/test/aws-semaphore-agent.test.js
@@ -141,7 +141,7 @@ describe("instance profile", () => {
       },
       ManagedPolicyArns: [{
         'Fn::Join': ['', [
-          'arn:', { Ref: 'AWS::Partition' }, ':iam::aws:policy/service-role/AmazonEC2RoleforSSM'
+          'arn:', { Ref: 'AWS::Partition' }, ':iam::aws:policy/service-role/AmazonSSMManagedInstanceCore'
         ]]
       }]
     });
@@ -167,7 +167,7 @@ describe("instance profile", () => {
       ManagedPolicyArns: [
         {
           'Fn::Join': ['', [
-            'arn:', { Ref: 'AWS::Partition' }, ':iam::aws:policy/service-role/AmazonEC2RoleforSSM'
+            'arn:', { Ref: 'AWS::Partition' }, ':iam::aws:policy/service-role/AmazonSSMManagedInstanceCore'
           ]]
         },
         {

From 21c5c39e50c7a8ec07a394426aa9ecaeb31f7ced Mon Sep 17 00:00:00 2001
From: Luke Young <91491244+lyoung-confluent@users.noreply.github.com>
Date: Tue, 29 Jul 2025 06:50:57 -0700
Subject: [PATCH 3/4] Update aws-semaphore-agent-stack.js

---
 lib/aws-semaphore-agent-stack.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lib/aws-semaphore-agent-stack.js b/lib/aws-semaphore-agent-stack.js
index 5906e62..e946154 100644
--- a/lib/aws-semaphore-agent-stack.js
+++ b/lib/aws-semaphore-agent-stack.js
@@ -160,7 +160,7 @@ class AwsSemaphoreAgentStack extends Stack {
 
   getInstanceProfileRoleManagedPolicies() {
     let managedPolicies = [
-      ManagedPolicy.fromAwsManagedPolicyName('service-role/AmazonSSMManagedInstanceCore')
+      ManagedPolicy.fromAwsManagedPolicyName('AmazonSSMManagedInstanceCore')
     ];
 
     if (!this.argumentStore.isEmpty("SEMAPHORE_AGENT_MANAGED_POLICY_NAMES")) {

From e9f2e09fe359ac007d70f48c5d690e60a2dcbd2f Mon Sep 17 00:00:00 2001
From: Luke Young <91491244+lyoung-confluent@users.noreply.github.com>
Date: Tue, 29 Jul 2025 06:51:32 -0700
Subject: [PATCH 4/4] Update aws-semaphore-agent.test.js

---
 test/aws-semaphore-agent.test.js | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/test/aws-semaphore-agent.test.js b/test/aws-semaphore-agent.test.js
index 6a471ce..3021228 100644
--- a/test/aws-semaphore-agent.test.js
+++ b/test/aws-semaphore-agent.test.js
@@ -141,7 +141,7 @@ describe("instance profile", () => {
       },
       ManagedPolicyArns: [{
         'Fn::Join': ['', [
-          'arn:', { Ref: 'AWS::Partition' }, ':iam::aws:policy/service-role/AmazonSSMManagedInstanceCore'
+          'arn:', { Ref: 'AWS::Partition' }, ':iam::aws:policy/AmazonSSMManagedInstanceCore'
         ]]
       }]
     });
@@ -167,7 +167,7 @@ describe("instance profile", () => {
       ManagedPolicyArns: [
         {
           'Fn::Join': ['', [
-            'arn:', { Ref: 'AWS::Partition' }, ':iam::aws:policy/service-role/AmazonSSMManagedInstanceCore'
+            'arn:', { Ref: 'AWS::Partition' }, ':iam::aws:policy/AmazonSSMManagedInstanceCore'
           ]]
         },
         {