Update to the EBS CSI Driver IAM Policy for AWS 2025 changes

kubernetes-sigs/aws-ebs-csi-driver#2190
lostsnow · Dec 6, 2024 · 8b2af8e · 8b2af8e
1 parent a47f634
commit 8b2af8e
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/iam.tf b/iam.tf
@@ -59,6 +59,16 @@ data "aws_iam_policy_document" "this" {
     actions = ["ec2:DeleteTags"]
   }
 
+  statement {
+    effect = "Allow"
+
+    resources = [
+      "arn:aws:ec2:*:*:snapshot/*",
+    ]
+
+    actions = ["ec2:CreateVolume"]
+  }
+
   statement {
     effect    = "Allow"
     resources = ["*"]