fix(efs): add necessary permissions (#233)

terraform-aws-modules · Apr 19, 2022 · 46da6e9 · 46da6e9
1 parent 724651e
commit 46da6e9
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/modules/iam-role-for-service-accounts-eks/policies.tf b/modules/iam-role-for-service-accounts-eks/policies.tf
@@ -317,8 +317,10 @@ data "aws_iam_policy_document" "efs_csi" {
 
   statement {
     actions = [
+      "ec2:DescribeAvailabilityZones",
       "elasticfilesystem:DescribeAccessPoints",
       "elasticfilesystem:DescribeFileSystems",
+      "elasticfilesystem:DescribeMountTargets",
     ]
 
     resources = ["*"]