作ったのは誰？EC2 インスタンス作成時に作成者を自動でタグ付与してみた

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "ActionForSSMAutomation",
            "Action": "ssm:StartAutomationExecution",
            "Effect": "Allow",
            "Resource": [
                "*"
            ]
        }
    ]
}

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "TrustEventBridgeService",
            "Effect": "Allow",
            "Principal": {
                "Service": [
                    "ssm.amazonaws.com",
                    "events.amazonaws.com"
                ]
            },
            "Action": "sts:AssumeRole"
        }
    ]
}

{
	"Version": "2012-10-17",
	"Statement": [
		{
			"Sid": "VisualEditor0",
			"Effect": "Allow",
			"Action": "iam:PassRole",
			"Resource": "arn:aws:iam::XXXXXXXXXXX:role/Automation-Execute-Role"
		}
	]
}

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "",
            "Effect": "Allow",
            "Principal": {
                "Service": "ssm.amazonaws.com"
            },
            "Action": "sts:AssumeRole"
        }
    ]
}

schemaVersion: '0.3'
description: Automation to tag EC2 instances with owner information from CloudTrail event
parameters:
  InstanceId:
    type: StringList
    description: Target InstanceId.
  UserType:
    type: String
    description: User Identity Type.
  UserName:
    type: String
    description: User Name.
  RoleName:
    type: String
    description: User Role Name.
assumeRole: arn:aws:iam::xxxxxxxxxxxx:role/Automation-Execute-Role
mainSteps:
  - name: Branch
    action: aws:branch
    isEnd: true
    inputs:
      Choices:
        - NextStep: TagStepIAMUserType
          Variable: '{{ UserType }}'
          StringEquals: IAMUser
        - NextStep: TagStepAssumedRoleType
          Variable: '{{ UserType }}'
          StringEquals: AssumedRole
  - name: TagStepIAMUserType
    action: aws:executeAwsApi
    isEnd: true
    inputs:
      Service: ec2
      Api: CreateTags
      Tags:
        - Key: Owner
          Value: '{{ UserName }}'
      Resources: '{{ InstanceId }}'
  - name: TagStepAssumedRoleType
    action: aws:executeAwsApi
    isEnd: true
    inputs:
      Service: ec2
      Api: CreateTags
      Tags:
        - Key: Owner
          Value: '{{ RoleName }}'
      Resources: '{{ InstanceId }}'

{
  "source": ["aws.ec2"],
  "detail-type": ["AWS API Call via CloudTrail"],
  "detail": {
    "eventName": ["RunInstances"]
  }
}

{
  "InstanceId": "$.detail.responseElements.instancesSet.items[0].instanceId",
  "RoleName": "$.detail.userIdentity.sessionContext.sessionIssuer.userName",
  "UserName": "$.detail.userIdentity.userName",
  "UserType": "$.detail.userIdentity.type"
}

{
    "InstanceId": ["<InstanceId>"],
    "UserType": ["<UserType>"],
    "UserName":["<UserName>"],
    "RoleName":["<RoleName>"]
}