feat: Update VPC CNI policy to 3/4/24 (#476)

terraform-aws-modules · Apr 8, 2024 · f9d5e28 · f9d5e28
1 parent bf013d2
commit f9d5e28
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/modules/iam-role-for-service-accounts-eks/policies.tf b/modules/iam-role-for-service-accounts-eks/policies.tf
@@ -1443,9 +1443,10 @@ data "aws_iam_policy_document" "vpc_cni" {
         "ec2:DescribeTags",
         "ec2:DescribeNetworkInterfaces",
         "ec2:DescribeInstanceTypes",
+        "ec2:DescribeSubnets",
         "ec2:DetachNetworkInterface",
         "ec2:ModifyNetworkInterfaceAttribute",
-        "ec2:UnassignPrivateIpAddresses",
+        "ec2:UnassignPrivateIpAddresses"
       ]
       resources = ["*"]
     }