Using ec2_instance_attribute in alerts

Looking for some guidance on creating an alert using the ec2_instance_attributes to filter instances by a specific tag.

For example, I want to search for instances failing status checks, SEARCH('{"AWS/EC2","InstanceId"} MetricName="StatusCheckFailed"','Maximum', 1) but exclude instances that are part of an ASG such that the instances with attribute ec2_instance_attribute("us-east-1", Tags.Name, { "tag:ASG": ["*"] }) are excluded.