fix: address PR review - fix README URLs, scope EC2 role ARN to account

- README Quick Start now references opensearch-project/observability-stack main
- EC2 demo role uses cfg.accountId instead of wildcard in OSIS ARN

Signed-off-by: Kyle Hounslow <kylhouns@amazon.com>

Author: kylehounslow

aws/cli-installer/README.md

@@ -5,9 +5,8 @@ Deploy the [Observability Stack](https://github.com/opensearch-project/observabi
 ## Quick Start
 
 ```bash
-git clone git@github.com:kylehounslow/observability-stack.git
-cd observability-stack && git checkout feat/aws-cli-installer
-cd aws/cli-installer && npm install
+git clone https://github.com/opensearch-project/observability-stack.git
+cd observability-stack/aws/cli-installer && npm install
 
 node bin/cli-installer.mjs --managed \
   --pipeline-name obs-stack-<your-alias> \

aws/cli-installer/src/ec2-demo.mjs

@@ -198,7 +198,7 @@ async function createDemoInstanceProfile(iam, cfg) {
 
   const ingestPolicy = JSON.stringify({
     Version: '2012-10-17',
-    Statement: [{ Effect: 'Allow', Action: 'osis:Ingest', Resource: `arn:aws:osis:${cfg.region}:*:pipeline/${cfg.pipelineName}` }],
+    Statement: [{ Effect: 'Allow', Action: 'osis:Ingest', Resource: `arn:aws:osis:${cfg.region}:${cfg.accountId}:pipeline/${cfg.pipelineName}` }],
   });
 
   try {