feat: Update VPC CNI policy to 3/4/24 (#476)

vuskeedoo · web-flow · commit f9d5e28996ca · 2024-04-08T18:43:26.000-04:00
diff --git a/modules/iam-role-for-service-accounts-eks/policies.tf b/modules/iam-role-for-service-accounts-eks/policies.tf
@@ -1443,9 +1443,10 @@ data "aws_iam_policy_document" "vpc_cni" {
         "ec2:DescribeTags",
         "ec2:DescribeNetworkInterfaces",
         "ec2:DescribeInstanceTypes",
+        "ec2:DescribeSubnets",
         "ec2:DetachNetworkInterface",
         "ec2:ModifyNetworkInterfaceAttribute",
-        "ec2:UnassignPrivateIpAddresses",
+        "ec2:UnassignPrivateIpAddresses"
       ]
       resources = ["*"]
     }

Original file line number	Diff line number	Diff line change
`@@ -1443,9 +1443,10 @@ data "aws_iam_policy_document" "vpc_cni" {`
`1443`	`1443`	`"ec2:DescribeTags",`
`1444`	`1444`	`"ec2:DescribeNetworkInterfaces",`
`1445`	`1445`	`"ec2:DescribeInstanceTypes",`
	`1446`	`+ "ec2:DescribeSubnets",`
`1446`	`1447`	`"ec2:DetachNetworkInterface",`
`1447`	`1448`	`"ec2:ModifyNetworkInterfaceAttribute",`
`1448`		`- "ec2:UnassignPrivateIpAddresses",`
	`1449`	`+ "ec2:UnassignPrivateIpAddresses"`
`1449`	`1450`	`]`
`1450`	`1451`	`resources = ["*"]`
`1451`	`1452`	`}`