This query used to work just fine until about a week ago; then it began failing with a DelegationFailure code from EC2.
The Cloudwatch scratchpad tool provided by Amazon behaves the same way now (although it also used to work).