feat: add wafv2:ListWebACLs permission for ALB controller

The AWS Load Balancer Controller requires the wafv2:ListWebACLs permission
to resolve WAF ACL names to ARNs when using the wafv2-acl-name annotation.

Without this permission, the controller cannot find the WAF ACL by name,
resulting in ingress creation failures.

This change adds the missing permission to the IAM policy for the
aws-load-balancer-controller service account.

Author: RamazanKara

aws_lb_controller.tf

@@ -71,6 +71,7 @@ data "aws_iam_policy_document" "lb_controller" {
       "wafv2:GetWebACLForResource",
       "wafv2:AssociateWebACL",
       "wafv2:DisassociateWebACL",
+      "wafv2:ListWebACLs",
       "shield:GetSubscriptionState",
       "shield:DescribeProtection",
       "shield:CreateProtection",