Update example policy

Signed-off-by: Eddie Torres <torredil@amazon.com>
kubernetes-sigs · Nov 16, 2022 · b1d476c · b1d476c
1 parent 3fd4f8c
commit b1d476c
Showing 1 changed file with 1 addition and 13 deletions.
diff --git a/docs/example-iam-policy.json b/docs/example-iam-policy.json
@@ -69,18 +69,6 @@
         }
       }
     },
-    {
-      "Effect": "Allow",
-      "Action": [
-        "ec2:CreateVolume"
-      ],
-      "Resource": "*",
-      "Condition": {
-        "StringLike": {
-          "aws:RequestTag/kubernetes.io/cluster/*": "owned"
-        }
-      }
-    },
     {
       "Effect": "Allow",
       "Action": [
@@ -113,7 +101,7 @@
       "Resource": "*",
       "Condition": {
         "StringLike": {
-          "ec2:ResourceTag/kubernetes.io/cluster/*": "owned"
+          "ec2:ResourceTag/kubernetes.io/created-for/pvc/name": "*"
         }
       }
     },