fix: Snapshot permissions issue for Karpenter submodule (#2649)

fix: snapshot permirrions issue for karpenter submodule
terraform-aws-modules · Jun 9, 2023 · 6217d0e · 6217d0e
1 parent a2fb28e
commit 6217d0e
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/modules/karpenter/main.tf b/modules/karpenter/main.tf
@@ -122,6 +122,7 @@ data "aws_iam_policy_document" "irsa" {
     actions = ["ec2:RunInstances"]
     resources = [
       "arn:${local.partition}:ec2:*::image/*",
+      "arn:${local.partition}:ec2:*::snapshot/*",
       "arn:${local.partition}:ec2:*:${local.account_id}:instance/*",
       "arn:${local.partition}:ec2:*:${local.account_id}:spot-instances-request/*",
       "arn:${local.partition}:ec2:*:${local.account_id}:security-group/*",