feat: Correct EFS CSI driver permissions to support tagging (#156)

aws-ia · May 16, 2023 · 90a70ba · 90a70ba
1 parent 189e3e1
commit 90a70ba
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 3 deletions.
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
@@ -10,7 +10,7 @@ repos:
       - id: detect-aws-credentials
         args: ['--allow-missing-credentials']
   - repo: https://github.com/antonbabenko/pre-commit-terraform
-    rev: v1.78.0
+    rev: v1.79.1
     hooks:
       - id: terraform_fmt
       - id: terraform_docs

diff --git a/main.tf b/main.tf
@@ -353,8 +353,10 @@ data "aws_iam_policy_document" "aws_efs_csi_driver" {
   }
 
   statement {
-    sid       = "AllowCreateAccessPoint"
-    actions   = ["elasticfilesystem:CreateAccessPoint"]
+    actions = [
+      "elasticfilesystem:CreateAccessPoint",
+      "elasticfilesystem:TagResource",
+    ]
     resources = local.efs_arns
 
     condition {