diff --git a/aws_ebs_csi.tf b/aws_ebs_csi.tf index a6369f2..8c8497b 100644 --- a/aws_ebs_csi.tf +++ b/aws_ebs_csi.tf @@ -28,6 +28,11 @@ data "aws_iam_policy_document" "ebs_csi" { resources = ["*"] } + statement { + actions = ["ec2:CopyVolumes"] + resources = ["arn:${local.partition}:ec2:*:*:volume/vol-*"] + } + statement { actions = ["ec2:CreateTags"] @@ -42,6 +47,7 @@ data "aws_iam_policy_document" "ebs_csi" { values = [ "CreateVolume", "CreateSnapshot", + "CopyVolumes", ] } } @@ -56,7 +62,10 @@ data "aws_iam_policy_document" "ebs_csi" { } statement { - actions = ["ec2:CreateVolume"] + actions = [ + "ec2:CreateVolume", + "ec2:CopyVolumes", + ] resources = ["arn:${local.partition}:ec2:*:*:volume/*"] condition { @@ -67,7 +76,10 @@ data "aws_iam_policy_document" "ebs_csi" { } statement { - actions = ["ec2:CreateVolume"] + actions = [ + "ec2:CreateVolume", + "ec2:CopyVolumes", + ] resources = ["arn:${local.partition}:ec2:*:*:volume/*"] condition {