[addon/external-dns] update irsa policy (#806)

Co-authored-by: Bryant Biggs <bryantbiggs@gmail.com>

modules/kubernetes-addons/external-dns/data.tf

@@ -9,7 +9,6 @@ data "aws_iam_policy_document" "external_dns_iam_policy_document" {
     resources = [data.aws_route53_zone.selected.arn]
     actions = [
       "route53:ChangeResourceRecordSets",
-      "route53:ListResourceRecordSets",
     ]
   }
 
@@ -18,6 +17,7 @@ data "aws_iam_policy_document" "external_dns_iam_policy_document" {
     resources = ["*"]
     actions = [
       "route53:ListHostedZones",
+      "route53:ListResourceRecordSets",
     ]
   }
 }