From 4efbeae5916ff466949b93589e15a827a4267915 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Tue, 13 Jan 2026 09:09:55 +0000
Subject: [PATCH 01/18] Update buildkite-agent to v3.115.4

---
 packer/linux/stack/scripts/install-buildkite-agent.sh    | 2 +-
 packer/windows/stack/scripts/install-buildkite-agent.ps1 | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/packer/linux/stack/scripts/install-buildkite-agent.sh b/packer/linux/stack/scripts/install-buildkite-agent.sh
index 9a1ca2c73..e6d30f3b4 100755
--- a/packer/linux/stack/scripts/install-buildkite-agent.sh
+++ b/packer/linux/stack/scripts/install-buildkite-agent.sh
@@ -1,7 +1,7 @@
 #!/usr/bin/env bash
 set -euo pipefail
 
-AGENT_VERSION="3.115.3"
+AGENT_VERSION="3.115.4"
 
 case $(uname -m) in
 x86_64) ARCH=amd64 ;;
diff --git a/packer/windows/stack/scripts/install-buildkite-agent.ps1 b/packer/windows/stack/scripts/install-buildkite-agent.ps1
index f29723b40..db102a3c4 100644
--- a/packer/windows/stack/scripts/install-buildkite-agent.ps1
+++ b/packer/windows/stack/scripts/install-buildkite-agent.ps1
@@ -2,7 +2,7 @@
 $ErrorActionPreference = "Stop"
 
 
-$AGENT_VERSION = "3.115.3"
+$AGENT_VERSION = "3.115.4"
 
 Write-Output "Creating bin dir..."
 if (-not (Test-Path C:\buildkite-agent\bin)) { New-Item -ItemType Directory -Path C:\buildkite-agent\bin -Force }

From 9f4503e3b3afa71030907ed4de2651769f702c55 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=C5=81ukasz=20Jendrysik?= <lukasz@buildkite.com>
Date: Tue, 13 Jan 2026 16:40:28 +0100
Subject: [PATCH 02/18] Update changelog to v6.53.0

Prepare for an upcoming release
---
 CHANGELOG.md | 22 ++++++++++++++++++++++
 1 file changed, 22 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 9e5067cf9..a0d31a931 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,6 +4,28 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](http://keepachangelog.com/en/1.0.0/)
 
+## [v6.53.0](https://github.com/buildkite/elastic-ci-stack-for-aws/compare/v6.52.0...v6.53.0) (2026-01-13)
+
+* Update buildkite-agent to v3.115.4 [#1699](https://github.com/buildkite/elastic-ci-stack-for-aws/pull/1699) ([renovate[bot]](https://github.com/apps/renovate))
+* Bump golang.org/x/sys from 0.39.0 to 0.40.0 [#1698](https://github.com/buildkite/elastic-ci-stack-for-aws/pull/1698) ([dependabot[bot]](https://github.com/apps/dependabot))
+* Update buildkite-agent to v3.115.3 [#1697](https://github.com/buildkite/elastic-ci-stack-for-aws/pull/1697) ([renovate[bot]](https://github.com/apps/renovate))
+* Update changelog for upcoming release [#1696](https://github.com/buildkite/elastic-ci-stack-for-aws/pull/1696) ([scadu](https://github.com/scadu))
+
+<details>
+  <summary><h3>Agent Changelog</h3></summary>
+
+## [v3.115.4](https://github.com/buildkite/agent/tree/v3.115.4) (2026-01-13)
+[Full Changelog](https://github.com/buildkite/agent/compare/v3.115.3...v3.115.4)
+
+### Changed
+
+- Fallback to `/usr/bin/env bash`, when `/bin/bash` does not exist [#3661](https://github.com/buildkite/agent/pull/3661) (@sundbry), [#3667](https://github.com/buildkite/agent/pull/3667) (@zhming0)
+
+### Internal
+- Bump various container base image version. [#3669](https://github.com/buildkite/agent/pull/3669), [#3668](https://github.com/buildkite/agent/pull/3668),  [#3667](https://github.com/buildkite/agent/pull/3667) (@dependabot[bot])
+</details>
+
+
 ## [v6.52.0](https://github.com/buildkite/elastic-ci-stack-for-aws/compare/v6.51.0...v6.52.0) (2025-12-18)
 
 ### Changes

From 822445e8f4eac0b4fa805ab0d6e659e7ec6f5ed2 Mon Sep 17 00:00:00 2001
From: Pete Tomasik <senate6268@gmail.com>
Date: Thu, 15 Jan 2026 14:31:33 -0500
Subject: [PATCH 03/18] Install add'l python3.x versions

---
 packer/linux/base/scripts/install-utils.sh | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/packer/linux/base/scripts/install-utils.sh b/packer/linux/base/scripts/install-utils.sh
index caf58ff5a..65634294c 100755
--- a/packer/linux/base/scripts/install-utils.sh
+++ b/packer/linux/base/scripts/install-utils.sh
@@ -28,6 +28,12 @@ sudo dnf install -yq \
   python \
   python-pip \
   python-setuptools \
+  python3.11 \
+  python3.11-pip \
+  python3.12 \
+  python3.12-pip \
+  python3.13 \
+  python3.13-pip \
   unzip \
   wget \
   zip

From e14ba119169922493c39fb9e578965d8822a7629 Mon Sep 17 00:00:00 2001
From: Pete Tomasik <senate6268@gmail.com>
Date: Mon, 26 Jan 2026 15:47:52 -0500
Subject: [PATCH 04/18] Update log messages during disk space checks/cleanup
 ops

---
 packer/linux/base/conf/docker/scripts/docker-low-disk-gc  | 4 ++--
 packer/linux/stack/conf/bin/bk-check-disk-space.sh        | 4 ++--
 packer/linux/stack/conf/buildkite-agent/hooks/environment | 4 ++--
 packer/linux/stack/conf/buildkite-agent/hooks/pre-exit    | 4 ++--
 4 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/packer/linux/base/conf/docker/scripts/docker-low-disk-gc b/packer/linux/base/conf/docker/scripts/docker-low-disk-gc
index d8bfb9531..9ea870145 100755
--- a/packer/linux/base/conf/docker/scripts/docker-low-disk-gc
+++ b/packer/linux/base/conf/docker/scripts/docker-low-disk-gc
@@ -34,12 +34,12 @@ trap mark_instance_unhealthy ERR
 ## if we really need to
 
 if ! /usr/local/bin/bk-check-disk-space.sh; then
-  echo "Cleaning up docker resources older than ${DOCKER_PRUNE_UNTIL}"
+  echo "Cleaning up docker resources older than ${DOCKER_PRUNE_UNTIL} to free disk space"
   docker image prune --all --force --filter "until=${DOCKER_PRUNE_UNTIL}"
   docker builder prune --all --force --filter "until=${DOCKER_PRUNE_UNTIL}"
 
   if ! /usr/local/bin/bk-check-disk-space.sh; then
-    echo "Disk health checks failed" >&2 && false
+    echo "Insufficient disk space after cleanup." >&2 && false
     exit 1
   fi
 fi
diff --git a/packer/linux/stack/conf/bin/bk-check-disk-space.sh b/packer/linux/stack/conf/bin/bk-check-disk-space.sh
index 49ffc7277..1889578d8 100755
--- a/packer/linux/stack/conf/bin/bk-check-disk-space.sh
+++ b/packer/linux/stack/conf/bin/bk-check-disk-space.sh
@@ -30,11 +30,11 @@ if [[ $disk_avail -lt $DISK_MIN_AVAILABLE ]]; then
       echo "Disk space sufficient after build purge. Continuing."
       exit 0
     else
-      echo "Disk health checks failed after build purge. Terminating agent." >&2
+      echo "Insufficient disk space remaining after build purge." >&2
       exit 1
     fi
   else
-    echo "Disk health checks failed. Build purge not enabled. Terminating agent." >&2
+    echo "Insufficient disk space. Build purge not enabled." >&2
     exit 1
   fi
 fi
diff --git a/packer/linux/stack/conf/buildkite-agent/hooks/environment b/packer/linux/stack/conf/buildkite-agent/hooks/environment
index 454c6b6e1..c6583d83f 100755
--- a/packer/linux/stack/conf/buildkite-agent/hooks/environment
+++ b/packer/linux/stack/conf/buildkite-agent/hooks/environment
@@ -41,7 +41,7 @@ fi
 
 echo "Checking disk space"
 if ! /usr/local/bin/bk-check-disk-space.sh; then
-  echo "~~~ :broom: Pruning docker resources"
+  echo "~~~ :broom: Pruning docker resources to free disk space"
   docker image prune --all --force --filter "until=${DOCKER_PRUNE_UNTIL:-4h}" || true
 
   if [[ "${DOCKER_BUILDER_PRUNE_ENABLED:-false}" == "true" ]]; then
@@ -51,7 +51,7 @@ if ! /usr/local/bin/bk-check-disk-space.sh; then
   echo "Checking disk space again"
   # Capture disk space output for potential error logging
   if ! disk_check_output=$(/usr/local/bin/bk-check-disk-space.sh 2>&1); then
-    echo "--- :warning: Disk health checks failed."
+    echo "--- :warning: Insufficient disk space after cleanup."
     echo "${disk_check_output}"
 
     # Check if instance termination is enabled (default: false for backward compatibility)
diff --git a/packer/linux/stack/conf/buildkite-agent/hooks/pre-exit b/packer/linux/stack/conf/buildkite-agent/hooks/pre-exit
index 32a356e4f..2bf9d6e81 100755
--- a/packer/linux/stack/conf/buildkite-agent/hooks/pre-exit
+++ b/packer/linux/stack/conf/buildkite-agent/hooks/pre-exit
@@ -5,7 +5,7 @@ set -eu -o pipefail
 if [[ "${ENABLE_PRE_EXIT_DISK_CLEANUP:-false}" == "true" ]]; then
   echo "Checking disk space"
   if ! /usr/local/bin/bk-check-disk-space.sh; then
-    echo "~~~ :broom: Pruning docker resources"
+    echo "~~~ :broom: Pruning docker resources to free disk space"
     docker image prune --all --force --filter "until=${DOCKER_PRUNE_UNTIL:-4h}" || true
 
     if [[ "${DOCKER_BUILDER_PRUNE_ENABLED:-false}" == "true" ]]; then
@@ -15,7 +15,7 @@ if [[ "${ENABLE_PRE_EXIT_DISK_CLEANUP:-false}" == "true" ]]; then
     echo "Checking disk space again"
     # Capture disk space output for potential error logging
     if ! disk_check_output=$(/usr/local/bin/bk-check-disk-space.sh 2>&1); then
-      echo "--- :warning: Disk health checks failed."
+      echo "--- :warning: Insufficient disk space after cleanup."
       echo "${disk_check_output}"
 
       # Check if instance termination is enabled (default: false for backward compatibility)

From 75d740762e9cce1117160444b136cccf17cf5a93 Mon Sep 17 00:00:00 2001
From: Mykematt <michael.omoge@buildkite.com>
Date: Wed, 10 Dec 2025 15:23:41 -0700
Subject: [PATCH 05/18] Add ScalerManagedPolicyARNs parameter for Lambda
 execution role

---
 templates/aws-stack.yml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/templates/aws-stack.yml b/templates/aws-stack.yml
index 2b02868e3..bad0d2a10 100644
--- a/templates/aws-stack.yml
+++ b/templates/aws-stack.yml
@@ -109,6 +109,7 @@ Metadata:
         - RootVolumeIops
         - RootVolumeThroughput
         - ManagedPolicyARNs
+        - ScalerManagedPolicyARNs
         - InstanceRoleARN
         - InstanceRoleName
         - InstanceRolePermissionsBoundaryARN
@@ -807,6 +808,11 @@ Parameters:
     Description: Optional - Comma separated list of managed IAM policy ARNs to attach to the instance role.
     Default: ""
 
+  ScalerManagedPolicyARNs:
+    Type: CommaDelimitedList
+    Description: Optional - Comma separated list of managed IAM policy ARNs to attach to the autoscaling Lambda execution role.
+    Default: ""
+
   IMDSv2Tokens:
     Type: String
     Description: >
@@ -2855,6 +2861,7 @@ Resources:
         BuildkiteAgentTokenParameter: !If [ UseCustomerManagedParameterPath, !Ref BuildkiteAgentTokenParameterStorePath, !Ref BuildkiteAgentTokenParameter ]
         BuildkiteAgentTokenParameterStoreKMSKey: !If [ UseCustomerManagedKeyForParameterStore, !Ref BuildkiteAgentTokenParameterStoreKMSKey, "" ]
         RolePermissionsBoundaryARN: !If [ SetInstanceRolePermissionsBoundaryARN, !Ref InstanceRolePermissionsBoundaryARN, "" ]
+        ManagedPolicyARNs: !Join [ ',', !Ref ScalerManagedPolicyARNs ]
         AgentEndpoint: !Ref AgentEndpoint
         BuildkiteQueue: !Ref BuildkiteQueue
         AgentsPerInstance: !Ref AgentsPerInstance
@@ -2886,6 +2893,7 @@ Resources:
         BuildkiteAgentTokenParameter: !If [ UseCustomerManagedParameterPath, !Ref BuildkiteAgentTokenParameterStorePath, !Ref BuildkiteAgentTokenParameter ]
         BuildkiteAgentTokenParameterStoreKMSKey: !If [ UseCustomerManagedKeyForParameterStore, !Ref BuildkiteAgentTokenParameterStoreKMSKey, "" ]
         RolePermissionsBoundaryARN: !If [ SetInstanceRolePermissionsBoundaryARN, !Ref InstanceRolePermissionsBoundaryARN, "" ]
+        ManagedPolicyARNs: !Join [ ',', !Ref ScalerManagedPolicyARNs ]
         AgentEndpoint: !Ref AgentEndpoint
         BuildkiteQueue: !Ref BuildkiteQueue
         AgentsPerInstance: !Ref AgentsPerInstance

From ec72054351e5ee8d58111535c377d327c3f1e62c Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Thu, 29 Jan 2026 02:10:36 +0000
Subject: [PATCH 06/18] Update buildkite-agent to v3.116.0

---
 packer/linux/stack/scripts/install-buildkite-agent.sh    | 2 +-
 packer/windows/stack/scripts/install-buildkite-agent.ps1 | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/packer/linux/stack/scripts/install-buildkite-agent.sh b/packer/linux/stack/scripts/install-buildkite-agent.sh
index e6d30f3b4..184af4578 100755
--- a/packer/linux/stack/scripts/install-buildkite-agent.sh
+++ b/packer/linux/stack/scripts/install-buildkite-agent.sh
@@ -1,7 +1,7 @@
 #!/usr/bin/env bash
 set -euo pipefail
 
-AGENT_VERSION="3.115.4"
+AGENT_VERSION="3.116.0"
 
 case $(uname -m) in
 x86_64) ARCH=amd64 ;;
diff --git a/packer/windows/stack/scripts/install-buildkite-agent.ps1 b/packer/windows/stack/scripts/install-buildkite-agent.ps1
index db102a3c4..2ba5cb43f 100644
--- a/packer/windows/stack/scripts/install-buildkite-agent.ps1
+++ b/packer/windows/stack/scripts/install-buildkite-agent.ps1
@@ -2,7 +2,7 @@
 $ErrorActionPreference = "Stop"
 
 
-$AGENT_VERSION = "3.115.4"
+$AGENT_VERSION = "3.116.0"
 
 Write-Output "Creating bin dir..."
 if (-not (Test-Path C:\buildkite-agent\bin)) { New-Item -ItemType Directory -Path C:\buildkite-agent\bin -Force }

From 1def69389b8c46844650886e65694397fed6882f Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=C5=81ukasz=20Jendrysik?= <lukasz@buildkite.com>
Date: Thu, 29 Jan 2026 09:55:08 +0100
Subject: [PATCH 07/18] Update changelog for upcoming release v6.54.0

---
 CHANGELOG.md | 32 ++++++++++++++++++++++++++++++++
 1 file changed, 32 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index a0d31a931..ebaaf512d 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,6 +4,38 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](http://keepachangelog.com/en/1.0.0/)
 
+## [v6.54.0](https://github.com/buildkite/elastic-ci-stack-for-aws/compare/v6.53.0...v6.54.0) (2026-01-29)
+
+* Update buildkite-agent to v3.116.0 [#1705](https://github.com/buildkite/elastic-ci-stack-for-aws/pull/1705) ([renovate[bot]](https://github.com/apps/renovate))
+* Update log messages during disk space checks/cleanup ops [#1704](https://github.com/buildkite/elastic-ci-stack-for-aws/pull/1704) ([petetomasik](https://github.com/petetomasik))
+* Install add'l python3.x versions [#1702](https://github.com/buildkite/elastic-ci-stack-for-aws/pull/1702) ([petetomasik](https://github.com/petetomasik))
+* Update changelog to v6.53.0 [#1700](https://github.com/buildkite/elastic-ci-stack-for-aws/pull/1700) ([scadu](https://github.com/scadu))
+
+<details>
+  <summary><h3>Agent Changelog</h3></summary>
+
+## [v3.116.0](https://github.com/buildkite/agent/tree/v3.116.0) (2026-01-28)
+[Full Changelog](https://github.com/buildkite/agent/compare/v3.115.4...v3.116.0)
+
+### Added
+- Support checkout skipping in agent [#3672](https://github.com/buildkite/agent/pull/3672) (@mcncl)
+- Add default BoolFlag, BoolTFlag values to descriptions [#3678](https://github.com/buildkite/agent/pull/3678) (@petetomasik)
+
+### Fixed
+- Exit with non-zero status if ping or heartbeat fail unrecoverably [#3687](https://github.com/buildkite/agent/pull/3687) (@DrJosh9000)
+- Repeated plugins run correct number of times with always-clone-fresh [#3684](https://github.com/buildkite/agent/pull/3684) (@DrJosh9000)
+- Fix nil pointer dereference in meta-data get on API timeout [#3682](https://github.com/buildkite/agent/pull/3682) (@lox)
+
+### Changed
+- In k8s mode, write BUILDKITE_ENV_FILE to /workspace [#3683](https://github.com/buildkite/agent/pull/3683) (@zhming0)
+
+### Internal
+- Refactor plugin config -> envar generation [#3655](https://github.com/buildkite/agent/pull/3655) (@moskyb)
+- Dependabot updates: [#3656](https://github.com/buildkite/agent/pull/3656), [#3654](https://github.com/buildkite/agent/pull/3654), [#3662](https://github.com/buildkite/agent/pull/3662), [#3673](https://github.com/buildkite/agent/pull/3673), [#3675](https://github.com/buildkite/agent/pull/3675), [#3680](https://github.com/buildkite/agent/pull/3680), [#3681](https://github.com/buildkite/agent/pull/3681) (@dependabot[bot])
+
+</details>
+
+
 ## [v6.53.0](https://github.com/buildkite/elastic-ci-stack-for-aws/compare/v6.52.0...v6.53.0) (2026-01-13)
 
 * Update buildkite-agent to v3.115.4 [#1699](https://github.com/buildkite/elastic-ci-stack-for-aws/pull/1699) ([renovate[bot]](https://github.com/apps/renovate))

From 8d2caf5238abd5231a161b2b4bd1a3756b06e3df Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=C5=81ukasz=20Jendrysik?= <lukasz@buildkite.com>
Date: Thu, 29 Jan 2026 10:02:13 +0100
Subject: [PATCH 08/18] Update notes for v6.53.0

---
 CHANGELOG.md | 67 +++++++++++++++++++++++++++++-----------------------
 1 file changed, 37 insertions(+), 30 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index ebaaf512d..7d1f1b08e 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,55 +6,62 @@ The format is based on [Keep a Changelog](http://keepachangelog.com/en/1.0.0/)
 
 ## [v6.54.0](https://github.com/buildkite/elastic-ci-stack-for-aws/compare/v6.53.0...v6.54.0) (2026-01-29)
 
+### Changes
 * Update buildkite-agent to v3.116.0 [#1705](https://github.com/buildkite/elastic-ci-stack-for-aws/pull/1705) ([renovate[bot]](https://github.com/apps/renovate))
 * Update log messages during disk space checks/cleanup ops [#1704](https://github.com/buildkite/elastic-ci-stack-for-aws/pull/1704) ([petetomasik](https://github.com/petetomasik))
-* Install add'l python3.x versions [#1702](https://github.com/buildkite/elastic-ci-stack-for-aws/pull/1702) ([petetomasik](https://github.com/petetomasik))
+* Install additional python3.x versions [#1702](https://github.com/buildkite/elastic-ci-stack-for-aws/pull/1702) ([petetomasik](https://github.com/petetomasik))
+
+### Internal
 * Update changelog to v6.53.0 [#1700](https://github.com/buildkite/elastic-ci-stack-for-aws/pull/1700) ([scadu](https://github.com/scadu))
 
 <details>
   <summary><h3>Agent Changelog</h3></summary>
 
-## [v3.116.0](https://github.com/buildkite/agent/tree/v3.116.0) (2026-01-28)
-[Full Changelog](https://github.com/buildkite/agent/compare/v3.115.4...v3.116.0)
-
-### Added
-- Support checkout skipping in agent [#3672](https://github.com/buildkite/agent/pull/3672) (@mcncl)
-- Add default BoolFlag, BoolTFlag values to descriptions [#3678](https://github.com/buildkite/agent/pull/3678) (@petetomasik)
-
-### Fixed
-- Exit with non-zero status if ping or heartbeat fail unrecoverably [#3687](https://github.com/buildkite/agent/pull/3687) (@DrJosh9000)
-- Repeated plugins run correct number of times with always-clone-fresh [#3684](https://github.com/buildkite/agent/pull/3684) (@DrJosh9000)
-- Fix nil pointer dereference in meta-data get on API timeout [#3682](https://github.com/buildkite/agent/pull/3682) (@lox)
-
-### Changed
-- In k8s mode, write BUILDKITE_ENV_FILE to /workspace [#3683](https://github.com/buildkite/agent/pull/3683) (@zhming0)
-
-### Internal
-- Refactor plugin config -> envar generation [#3655](https://github.com/buildkite/agent/pull/3655) (@moskyb)
-- Dependabot updates: [#3656](https://github.com/buildkite/agent/pull/3656), [#3654](https://github.com/buildkite/agent/pull/3654), [#3662](https://github.com/buildkite/agent/pull/3662), [#3673](https://github.com/buildkite/agent/pull/3673), [#3675](https://github.com/buildkite/agent/pull/3675), [#3680](https://github.com/buildkite/agent/pull/3680), [#3681](https://github.com/buildkite/agent/pull/3681) (@dependabot[bot])
-
+## [v3.116.0](https://github.com/buildkite/agent/tree/v3.116.0) (2026-01-28)
+[Full Changelog](https://github.com/buildkite/agent/compare/v3.115.4...v3.116.0)
+
+### Added
+- Support checkout skipping in agent [#3672](https://github.com/buildkite/agent/pull/3672) (@mcncl)
+- Add default BoolFlag, BoolTFlag values to descriptions [#3678](https://github.com/buildkite/agent/pull/3678) (@petetomasik)
+
+### Fixed
+- Exit with non-zero status if ping or heartbeat fail unrecoverably [#3687](https://github.com/buildkite/agent/pull/3687) (@DrJosh9000)
+- Repeated plugins run correct number of times with always-clone-fresh [#3684](https://github.com/buildkite/agent/pull/3684) (@DrJosh9000)
+- Fix nil pointer dereference in meta-data get on API timeout [#3682](https://github.com/buildkite/agent/pull/3682) (@lox)
+
+### Changed
+- In k8s mode, write BUILDKITE_ENV_FILE to /workspace [#3683](https://github.com/buildkite/agent/pull/3683) (@zhming0)
+
+### Internal
+- Refactor plugin config -> envar generation [#3655](https://github.com/buildkite/agent/pull/3655) (@moskyb)
+- Dependabot updates: [#3656](https://github.com/buildkite/agent/pull/3656), [#3654](https://github.com/buildkite/agent/pull/3654), [#3662](https://github.com/buildkite/agent/pull/3662), [#3673](https://github.com/buildkite/agent/pull/3673), [#3675](https://github.com/buildkite/agent/pull/3675), [#3680](https://github.com/buildkite/agent/pull/3680), [#3681](https://github.com/buildkite/agent/pull/3681) (@dependabot[bot])
+
 </details>
 
 
 ## [v6.53.0](https://github.com/buildkite/elastic-ci-stack-for-aws/compare/v6.52.0...v6.53.0) (2026-01-13)
 
+### Changes
 * Update buildkite-agent to v3.115.4 [#1699](https://github.com/buildkite/elastic-ci-stack-for-aws/pull/1699) ([renovate[bot]](https://github.com/apps/renovate))
+
+### Dependency updates
 * Bump golang.org/x/sys from 0.39.0 to 0.40.0 [#1698](https://github.com/buildkite/elastic-ci-stack-for-aws/pull/1698) ([dependabot[bot]](https://github.com/apps/dependabot))
-* Update buildkite-agent to v3.115.3 [#1697](https://github.com/buildkite/elastic-ci-stack-for-aws/pull/1697) ([renovate[bot]](https://github.com/apps/renovate))
+
+### Internal
 * Update changelog for upcoming release [#1696](https://github.com/buildkite/elastic-ci-stack-for-aws/pull/1696) ([scadu](https://github.com/scadu))
 
 <details>
   <summary><h3>Agent Changelog</h3></summary>
 
-## [v3.115.4](https://github.com/buildkite/agent/tree/v3.115.4) (2026-01-13)
-[Full Changelog](https://github.com/buildkite/agent/compare/v3.115.3...v3.115.4)
-
-### Changed
-
-- Fallback to `/usr/bin/env bash`, when `/bin/bash` does not exist [#3661](https://github.com/buildkite/agent/pull/3661) (@sundbry), [#3667](https://github.com/buildkite/agent/pull/3667) (@zhming0)
-
-### Internal
-- Bump various container base image version. [#3669](https://github.com/buildkite/agent/pull/3669), [#3668](https://github.com/buildkite/agent/pull/3668),  [#3667](https://github.com/buildkite/agent/pull/3667) (@dependabot[bot])
+## [v3.115.4](https://github.com/buildkite/agent/tree/v3.115.4) (2026-01-13)
+[Full Changelog](https://github.com/buildkite/agent/compare/v3.115.3...v3.115.4)
+
+### Changed
+
+- Fallback to `/usr/bin/env bash`, when `/bin/bash` does not exist [#3661](https://github.com/buildkite/agent/pull/3661) (@sundbry), [#3667](https://github.com/buildkite/agent/pull/3667) (@zhming0)
+
+### Internal
+- Bump various container base image version. [#3669](https://github.com/buildkite/agent/pull/3669), [#3668](https://github.com/buildkite/agent/pull/3668),  [#3667](https://github.com/buildkite/agent/pull/3667) (@dependabot[bot])
 </details>
 
 

From ca9ccaa972e03876745f3f8b14a6cd24e6cdc047 Mon Sep 17 00:00:00 2001
From: Pete Tomasik <senate6268@gmail.com>
Date: Thu, 29 Jan 2026 11:25:28 -0500
Subject: [PATCH 09/18] Fix disk cleanup for multi-agent instances

---
 .../linux/stack/conf/bin/bk-check-disk-space.sh   | 15 +++++++++------
 1 file changed, 9 insertions(+), 6 deletions(-)

diff --git a/packer/linux/stack/conf/bin/bk-check-disk-space.sh b/packer/linux/stack/conf/bin/bk-check-disk-space.sh
index 1889578d8..3ba0e1b5d 100755
--- a/packer/linux/stack/conf/bin/bk-check-disk-space.sh
+++ b/packer/linux/stack/conf/bin/bk-check-disk-space.sh
@@ -21,15 +21,18 @@ if [[ $disk_avail -lt $DISK_MIN_AVAILABLE ]]; then
 
   # Last resort for clearing space with build directory cleanup (if enabled)
   if [[ "${BUILDKITE_PURGE_BUILDS_ON_DISK_FULL:-false}" == "true" ]]; then
-    echo "Purging all build directories to reclaim disk space..."
-    rm -rf "${BUILDKITE_AGENT_BUILD_PATH:-/var/lib/buildkite-agent/builds}"/*
+    # Extract the agent-specific directory to avoid disrupting other agents on the same instance
+    AGENT_ORG_PIPELINE_DIR="${BUILDKITE_BUILD_CHECKOUT_PATH#"${BUILDKITE_BUILD_PATH}/"}"
+    AGENT_DIR="${AGENT_ORG_PIPELINE_DIR%%/*}"
+    AGENT_BUILD_DIR="${BUILDKITE_BUILD_PATH}/${AGENT_DIR}"
+
+    echo "Purging builds in ${AGENT_BUILD_DIR}"
+    rm -rf "${AGENT_BUILD_DIR:?}"/*
+
     disk_avail=$(df -k --output=avail "$DOCKER_DIR" | tail -n1)
     disk_avail_human=$(numfmt --to=iec-i --suffix=B --from-unit=1024 "${disk_avail}")
     echo "Disk space free after build purge: ${disk_avail_human} (${disk_avail}KB)"
-    if [[ $disk_avail -ge $DISK_MIN_AVAILABLE ]]; then
-      echo "Disk space sufficient after build purge. Continuing."
-      exit 0
-    else
+    if [[ $disk_avail -lt $DISK_MIN_AVAILABLE ]]; then
       echo "Insufficient disk space remaining after build purge." >&2
       exit 1
     fi

From 7b4906a56fd6eae1f322edcca5a4788135f176c9 Mon Sep 17 00:00:00 2001
From: Pete Tomasik <senate6268@gmail.com>
Date: Fri, 30 Jan 2026 09:45:21 -0500
Subject: [PATCH 10/18] Update
 packer/linux/stack/conf/bin/bk-check-disk-space.sh

Co-authored-by: Ben McNicholl <git@benmcnicholl.com>
---
 packer/linux/stack/conf/bin/bk-check-disk-space.sh | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/packer/linux/stack/conf/bin/bk-check-disk-space.sh b/packer/linux/stack/conf/bin/bk-check-disk-space.sh
index 3ba0e1b5d..82ec83e53 100755
--- a/packer/linux/stack/conf/bin/bk-check-disk-space.sh
+++ b/packer/linux/stack/conf/bin/bk-check-disk-space.sh
@@ -24,6 +24,10 @@ if [[ $disk_avail -lt $DISK_MIN_AVAILABLE ]]; then
     # Extract the agent-specific directory to avoid disrupting other agents on the same instance
     AGENT_ORG_PIPELINE_DIR="${BUILDKITE_BUILD_CHECKOUT_PATH#"${BUILDKITE_BUILD_PATH}/"}"
     AGENT_DIR="${AGENT_ORG_PIPELINE_DIR%%/*}"
+    if [[ -z "${AGENT_DIR}" ]]; then
+      echo "Unable to determine agent-specific build directory. Skipping purge to avoid deleting other agents' builds." >&2
+      exit 1
+    fi
     AGENT_BUILD_DIR="${BUILDKITE_BUILD_PATH}/${AGENT_DIR}"
 
     echo "Purging builds in ${AGENT_BUILD_DIR}"

From 195907a991a4e671f14a9583e9b20af996efbb11 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sun, 1 Feb 2026 02:38:12 +0000
Subject: [PATCH 11/18] Update dependency go to v1.25.6

---
 go.mod | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go.mod b/go.mod
index 19342cd29..42de79c1c 100644
--- a/go.mod
+++ b/go.mod
@@ -2,7 +2,7 @@ module github.com/buildkite/elastic-ci-stack-for-aws/v6
 
 go 1.24.0
 
-toolchain go1.25.4
+toolchain go1.25.6
 
 require (
 	github.com/google/go-cmp v0.7.0

From 0a1ecd73df0630f82762c0b4c2f9ffcd26508948 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sun, 1 Feb 2026 22:39:17 +0000
Subject: [PATCH 12/18] Update session-manager-plugin to v1.2.764.0

---
 packer/linux/base/scripts/versions.sh    | 2 +-
 packer/windows/base/scripts/versions.ps1 | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/packer/linux/base/scripts/versions.sh b/packer/linux/base/scripts/versions.sh
index cb6799f12..2f5b66323 100644
--- a/packer/linux/base/scripts/versions.sh
+++ b/packer/linux/base/scripts/versions.sh
@@ -4,7 +4,7 @@
 
 # Core Tools
 export AWS_CLI_LINUX_VERSION="2.31.32"
-export SESSION_MANAGER_PLUGIN_VERSION="1.2.707.0"
+export SESSION_MANAGER_PLUGIN_VERSION="1.2.764.0"
 
 # Development Tools
 export GIT_LFS_VERSION="3.4.0"
diff --git a/packer/windows/base/scripts/versions.ps1 b/packer/windows/base/scripts/versions.ps1
index fe95630f3..119d451a3 100644
--- a/packer/windows/base/scripts/versions.ps1
+++ b/packer/windows/base/scripts/versions.ps1
@@ -3,7 +3,7 @@
 
 # Core Tools
 $AWS_CLI_WINDOWS_VERSION = "2.31.32"
-$SESSION_MANAGER_PLUGIN_VERSION = "1.2.707.0"
+$SESSION_MANAGER_PLUGIN_VERSION = "1.2.764.0"
 
 # Development Tools
 $GIT_VERSION = "2.39.1"

From 9bd28dd7914cafe254368509a754a4add9af98ff Mon Sep 17 00:00:00 2001
From: Ola Buildkite <olabuildkite@olabuildkite.local>
Date: Mon, 2 Feb 2026 22:22:03 -0700
Subject: [PATCH 13/18] Update scaler version to allow CI pass test

---
 templates/aws-stack.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/templates/aws-stack.yml b/templates/aws-stack.yml
index bad0d2a10..144e97c8c 100644
--- a/templates/aws-stack.yml
+++ b/templates/aws-stack.yml
@@ -2856,7 +2856,7 @@ Resources:
           - AgentScalerARN
           - "x86-64"
           - ARN
-        SemanticVersion: 1.10.0
+        SemanticVersion: 1.10.1
       Parameters:
         BuildkiteAgentTokenParameter: !If [ UseCustomerManagedParameterPath, !Ref BuildkiteAgentTokenParameterStorePath, !Ref BuildkiteAgentTokenParameter ]
         BuildkiteAgentTokenParameterStoreKMSKey: !If [ UseCustomerManagedKeyForParameterStore, !Ref BuildkiteAgentTokenParameterStoreKMSKey, "" ]
@@ -2888,7 +2888,7 @@ Resources:
           - AgentScalerARN
           - "arm64"
           - ARN
-        SemanticVersion: 1.10.0
+        SemanticVersion: 1.10.1
       Parameters:
         BuildkiteAgentTokenParameter: !If [ UseCustomerManagedParameterPath, !Ref BuildkiteAgentTokenParameterStorePath, !Ref BuildkiteAgentTokenParameter ]
         BuildkiteAgentTokenParameterStoreKMSKey: !If [ UseCustomerManagedKeyForParameterStore, !Ref BuildkiteAgentTokenParameterStoreKMSKey, "" ]

From 965b4ec853c1bf065dc34d2688e941fed9b944f4 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Wed, 4 Feb 2026 01:10:04 +0000
Subject: [PATCH 14/18] Update buildkite-agent to v3.117.0

---
 packer/linux/stack/scripts/install-buildkite-agent.sh    | 2 +-
 packer/windows/stack/scripts/install-buildkite-agent.ps1 | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/packer/linux/stack/scripts/install-buildkite-agent.sh b/packer/linux/stack/scripts/install-buildkite-agent.sh
index 184af4578..bbfee8fff 100755
--- a/packer/linux/stack/scripts/install-buildkite-agent.sh
+++ b/packer/linux/stack/scripts/install-buildkite-agent.sh
@@ -1,7 +1,7 @@
 #!/usr/bin/env bash
 set -euo pipefail
 
-AGENT_VERSION="3.116.0"
+AGENT_VERSION="3.117.0"
 
 case $(uname -m) in
 x86_64) ARCH=amd64 ;;
diff --git a/packer/windows/stack/scripts/install-buildkite-agent.ps1 b/packer/windows/stack/scripts/install-buildkite-agent.ps1
index 2ba5cb43f..4acb5da94 100644
--- a/packer/windows/stack/scripts/install-buildkite-agent.ps1
+++ b/packer/windows/stack/scripts/install-buildkite-agent.ps1
@@ -2,7 +2,7 @@
 $ErrorActionPreference = "Stop"
 
 
-$AGENT_VERSION = "3.116.0"
+$AGENT_VERSION = "3.117.0"
 
 Write-Output "Creating bin dir..."
 if (-not (Test-Path C:\buildkite-agent\bin)) { New-Item -ItemType Directory -Path C:\buildkite-agent\bin -Force }

From 83efd0f21fe089b082f1c289835b8c8af234827d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=C5=81ukasz=20Jendrysik?= <lukasz@buildkite.com>
Date: Wed, 4 Feb 2026 14:42:12 +0100
Subject: [PATCH 15/18] Add changelog for v6.55.0

---
 CHANGELOG.md | 31 +++++++++++++++++++++++++++++++
 1 file changed, 31 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 7d1f1b08e..228fec272 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,6 +4,37 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](http://keepachangelog.com/en/1.0.0/)
 
+## [v6.55.0](https://github.com/buildkite/elastic-ci-stack-for-aws/compare/v6.54.0...v6.55.0) (2026-02-04)
+
+### Changes
+* Update buildkite-agent to v3.117.0 [#1710](https://github.com/buildkite/elastic-ci-stack-for-aws/pull/1710) ([renovate[bot]](https://github.com/apps/renovate))
+* SUP-2919: Add ScalerManagedPolicyARNs parameter for Lambda execution role [#1683](https://github.com/buildkite/elastic-ci-stack-for-aws/pull/1683) ([Mykematt](https://github.com/Mykematt))
+
+### Dependency updates
+* Update session-manager-plugin to v1.2.764.0 [#1709](https://github.com/buildkite/elastic-ci-stack-for-aws/pull/1709) ([renovate[bot]](https://github.com/apps/renovate))
+* Update changelog for release v6.54.0 [#1706](https://github.com/buildkite/elastic-ci-stack-for-aws/pull/1706) ([scadu](https://github.com/scadu))
+* Update dependency go to v1.25.6 [#1708](https://github.com/buildkite/elastic-ci-stack-for-aws/pull/1708) ([renovate[bot]](https://github.com/apps/renovate))
+
+### Fixed
+* Fix disk cleanup for multi-agent instances [#1707](https://github.com/buildkite/elastic-ci-stack-for-aws/pull/1707) ([petetomasik](https://github.com/petetomasik))
+
+<details>
+  <summary><h3>Agent Changelog</h3></summary>
+
+## [v3.117.0](https://github.com/buildkite/agent/tree/v3.117.0) (2026-02-04)
+[Full Changelog](https://github.com/buildkite/agent/compare/v3.116.0...v3.117.0)
+
+### Added
+- Flag to fetch the diff-base before diffing for `if_changed` [#3689](https://github.com/buildkite/agent/pull/3689) (@DrJosh9000)
+
+### Fixed
+- Continue heartbeats while job is stopping [#3694](https://github.com/buildkite/agent/pull/3694) (@DrJosh9000)
+
+### Internal
+- Make `bucket-url` optional for cache commands [#3690](https://github.com/buildkite/agent/pull/3690) (@mitchbne)
+</details>
+
+
 ## [v6.54.0](https://github.com/buildkite/elastic-ci-stack-for-aws/compare/v6.53.0...v6.54.0) (2026-01-29)
 
 ### Changes

From ff109b117ba79b9e638a324e5d3bb4783982236f Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=C5=81ukasz=20Jendrysik?= <lukasz@buildkite.com>
Date: Wed, 4 Feb 2026 14:43:57 +0100
Subject: [PATCH 16/18] Move changelog update to internal

---
 CHANGELOG.md | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 228fec272..1bf9493c1 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -12,12 +12,14 @@ The format is based on [Keep a Changelog](http://keepachangelog.com/en/1.0.0/)
 
 ### Dependency updates
 * Update session-manager-plugin to v1.2.764.0 [#1709](https://github.com/buildkite/elastic-ci-stack-for-aws/pull/1709) ([renovate[bot]](https://github.com/apps/renovate))
-* Update changelog for release v6.54.0 [#1706](https://github.com/buildkite/elastic-ci-stack-for-aws/pull/1706) ([scadu](https://github.com/scadu))
 * Update dependency go to v1.25.6 [#1708](https://github.com/buildkite/elastic-ci-stack-for-aws/pull/1708) ([renovate[bot]](https://github.com/apps/renovate))
 
 ### Fixed
 * Fix disk cleanup for multi-agent instances [#1707](https://github.com/buildkite/elastic-ci-stack-for-aws/pull/1707) ([petetomasik](https://github.com/petetomasik))
 
+### Internal
+* Update changelog for release v6.54.0 [#1706](https://github.com/buildkite/elastic-ci-stack-for-aws/pull/1706) ([scadu](https://github.com/scadu))
+
 <details>
   <summary><h3>Agent Changelog</h3></summary>
 

From bff4fb29eb3565f98a33b9f0c8fc9ad759bfb02a Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 9 Feb 2026 11:07:17 +0000
Subject: [PATCH 17/18] Bump golang.org/x/sys from 0.40.0 to 0.41.0 (#1712)

Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.40.0 to 0.41.0.
- [Commits](https://github.com/golang/sys/compare/v0.40.0...v0.41.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sys
  dependency-version: 0.41.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 go.mod | 2 +-
 go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/go.mod b/go.mod
index 42de79c1c..da5ce0749 100644
--- a/go.mod
+++ b/go.mod
@@ -6,5 +6,5 @@ toolchain go1.25.6
 
 require (
 	github.com/google/go-cmp v0.7.0
-	golang.org/x/sys v0.40.0
+	golang.org/x/sys v0.41.0
 )
diff --git a/go.sum b/go.sum
index 85d1d28f0..028ae9ead 100644
--- a/go.sum
+++ b/go.sum
@@ -1,4 +1,4 @@
 github.com/google/go-cmp v0.7.0 h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8=
 github.com/google/go-cmp v0.7.0/go.mod h1:pXiqmnSA92OHEEa9HXL2W4E7lf9JzCmGVUdgjX3N/iU=
-golang.org/x/sys v0.40.0 h1:DBZZqJ2Rkml6QMQsZywtnjnnGvHza6BTfYFWY9kjEWQ=
-golang.org/x/sys v0.40.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
+golang.org/x/sys v0.41.0 h1:Ivj+2Cp/ylzLiEU89QhWblYnOE9zerudt9Ftecq2C6k=
+golang.org/x/sys v0.41.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=

From cfe26713ebde7275e6c0581d9b7f0e7d3282f1b0 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=C5=81ukasz=20Jendrysik?= <lukasz@buildkite.com>
Date: Tue, 10 Feb 2026 12:29:37 +0100
Subject: [PATCH 18/18] Bump agent scaler to v1.11.0

This version includes handling for danling instances for Windows (when
Elastic CI Mode is enabled via `ScalerEnableExperimentalElasticCIMode`),
and swaps direct instance termination for marking instance as unhealthy
in the Auto Scaling Group.
---
 templates/aws-stack.yml    | 5 +++--
 templates/service-role.yml | 1 +
 2 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/templates/aws-stack.yml b/templates/aws-stack.yml
index 144e97c8c..8e24a6806 100644
--- a/templates/aws-stack.yml
+++ b/templates/aws-stack.yml
@@ -2725,6 +2725,7 @@ Resources:
                   - "ssm:SendCommand"
                 Resource:
                   - !Sub arn:${AWS::Partition}:ssm:${AWS::Region}::document/AWS-RunShellScript
+                  - !Sub arn:${AWS::Partition}:ssm:${AWS::Region}::document/AWS-RunPowerShellScript
         - PolicyName: StopBuildkiteInstances
           PolicyDocument:
             Version: 2012-10-17
@@ -2856,7 +2857,7 @@ Resources:
           - AgentScalerARN
           - "x86-64"
           - ARN
-        SemanticVersion: 1.10.1
+        SemanticVersion: 1.11.0
       Parameters:
         BuildkiteAgentTokenParameter: !If [ UseCustomerManagedParameterPath, !Ref BuildkiteAgentTokenParameterStorePath, !Ref BuildkiteAgentTokenParameter ]
         BuildkiteAgentTokenParameterStoreKMSKey: !If [ UseCustomerManagedKeyForParameterStore, !Ref BuildkiteAgentTokenParameterStoreKMSKey, "" ]
@@ -2888,7 +2889,7 @@ Resources:
           - AgentScalerARN
           - "arm64"
           - ARN
-        SemanticVersion: 1.10.1
+        SemanticVersion: 1.11.0
       Parameters:
         BuildkiteAgentTokenParameter: !If [ UseCustomerManagedParameterPath, !Ref BuildkiteAgentTokenParameterStorePath, !Ref BuildkiteAgentTokenParameter ]
         BuildkiteAgentTokenParameterStoreKMSKey: !If [ UseCustomerManagedKeyForParameterStore, !Ref BuildkiteAgentTokenParameterStoreKMSKey, "" ]
diff --git a/templates/service-role.yml b/templates/service-role.yml
index 8bdce6b45..2deafd7db 100644
--- a/templates/service-role.yml
+++ b/templates/service-role.yml
@@ -295,6 +295,7 @@ Resources:
                 "autoscaling:DescribeAutoScalingInstances",
                 "autoscaling:DescribeLifecycleHooks",
                 "autoscaling:SetDesiredCapacity",
+                "autoscaling:SetInstanceHealth",
                 "autoscaling:PutLifecycleHook",
                 "autoscaling:DeleteLifecycleHook",
                 "autoscaling:SetInstanceProtection",