feat(ebs-csi): Add support for volume clones

Following the [v.1.51.0](https://github.com/kubernetes-sigs/aws-ebs-csi-driver/releases/tag/v1.51.0) release of the aws-esb-csi-driver, [support for creating instant, point-in-time copies of EBS volumes within the same Availability Zone](kubernetes-sigs/aws-ebs-csi-driver#2716) has been added.

This updates the policy for the EBS CSI to accomodate this change

Author: zoispag

aws_ebs_csi.tf

@@ -28,6 +28,11 @@ data "aws_iam_policy_document" "ebs_csi" {
     resources = ["*"]
   }
 
+  statement {
+    actions   = ["ec2:CopyVolumes"]
+    resources = ["arn:${local.partition}:ec2:*:*:volume/vol-*"]
+  }
+
   statement {
     actions = ["ec2:CreateTags"]
 
@@ -42,6 +47,7 @@ data "aws_iam_policy_document" "ebs_csi" {
       values = [
         "CreateVolume",
         "CreateSnapshot",
+        "CopyVolumes",
       ]
     }
   }
@@ -56,7 +62,10 @@ data "aws_iam_policy_document" "ebs_csi" {
   }
 
   statement {
-    actions   = ["ec2:CreateVolume"]
+    actions = [
+      "ec2:CreateVolume",
+      "ec2:CopyVolumes",
+    ]
     resources = ["arn:${local.partition}:ec2:*:*:volume/*"]
 
     condition {
@@ -67,7 +76,10 @@ data "aws_iam_policy_document" "ebs_csi" {
   }
 
   statement {
-    actions   = ["ec2:CreateVolume"]
+    actions = [
+      "ec2:CreateVolume",
+      "ec2:CopyVolumes",
+    ]
     resources = ["arn:${local.partition}:ec2:*:*:volume/*"]
 
     condition {