How do I add "AmazonEC2ContainerServiceFullAccess" to the ec2 instances created by a cluster / auto-scaling group?

For EC2 Autoscaling would be in the launch config or launch template after you create your role and instance profile

got it! I missed that property somehow. Thank you 🙂