fix: removing ec2:DescribeInstances (#386)

Adjusting the SCP to no longer block describing instances.

Author: patheard

terragrunt/org_account/organization/scp_deny_ec2_connect.tf

@@ -3,7 +3,6 @@ data "aws_iam_policy_document" "scp_deny_ec2_connect" {
     effect = "Deny"
     actions = [
       "ec2:CreateKeyPair",
-      "ec2:DescribeInstances",
       "ec2-instance-connect:OpenTunnel",
       "ec2-instance-connect:SendSSHPublicKey",
       "ec2-instance-connect:SendSerialConsoleSSHPublicKey"