This is a permissions problem. You have to give read access to ec2:DescribeInstances in the policy for your user.
ec2:DescribeInstances