Specify asg perm resources in InstancePolicy

[nitrocode]

What

I updated the InstancePolicy to match the Resources of the AsgProcessSuspenderRole's AsgProcessModification policy.

elastic-ci-stack-for-aws/templates/aws-stack.yml

Lines 1038 to 1041 in b84d760

	- Effect: Allow
	Action:
	- 'autoscaling:SuspendProcesses'
	Resource: !Sub arn:${AWS::Partition}:autoscaling:${AWS::Region}:${AWS::AccountId}:autoScalingGroup:*:autoScalingGroupName/${AWS::StackName}-AgentAutoScaleGroup-*

Notes

The InstancePolicy could be further cut down.

For example, do we use sqs or sns anymore ?

elastic-ci-stack-for-aws/templates/aws-stack.yml

Lines 730 to 735 in b84d760

	- Effect: Allow
	Action:
	- sqs:*
	- sns:Unsubscribe
	- sns:Subscribe
	Resource: "*"

According to the 5.2.0's IAMRole's AccessAdvisor tab in AWS, it shows that the following are unused

• Amazon EC2 (InstancePolicy)
• Amazon CloudWatch (InstancePolicy)
• AWS CloudFormation (InstancePolicy)
• Amazon SQS (InstancePolicy)
• Amazon SNS (InstancePolicy)

It would be good to pair these (and other?) IAM changes with the permission boundary PR #767.