fix(addon): Add missing permissions needed for EFS CSI (#723)

aws-ia · Jul 1, 2022 · 15b50e0 · 15b50e0
1 parent 281e121
commit 15b50e0
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/modules/kubernetes-addons/aws-efs-csi-driver/data.tf b/modules/kubernetes-addons/aws-efs-csi-driver/data.tf
@@ -5,8 +5,10 @@ data "aws_iam_policy_document" "aws_efs_csi_driver" {
     resources = ["*"]
 
     actions = [
+      "ec2:DescribeAvailabilityZones",
       "elasticfilesystem:DescribeAccessPoints",
       "elasticfilesystem:DescribeFileSystems",
+      "elasticfilesystem:DescribeMountTargets"
     ]
   }