feat: Added permissions to list zone tags in iam-role-for-service-accounts-eks module (#394)

jalaziz · web-flow · commit 740945f62ea4 · 2023-06-23T12:04:16.000+02:00
diff --git a/modules/iam-role-for-service-accounts-eks/policies.tf b/modules/iam-role-for-service-accounts-eks/policies.tf
@@ -439,6 +439,7 @@ data "aws_iam_policy_document" "external_dns" {
     actions = [
       "route53:ListHostedZones",
       "route53:ListResourceRecordSets",
+      "route53:ListTagsForResource",
     ]
 
     resources = ["*"]

Original file line number	Diff line number	Diff line change
`@@ -439,6 +439,7 @@ data "aws_iam_policy_document" "external_dns" {`
`439`	`439`	`actions = [`
`440`	`440`	`"route53:ListHostedZones",`
`441`	`441`	`"route53:ListResourceRecordSets",`
	`442`	`+ "route53:ListTagsForResource",`
`442`	`443`	`]`
`443`	`444`
`444`	`445`	`resources = ["*"]`