fix: Use partition data source on VPC CNI IPv6 policy (#2161)

baibailiha · web-flow · commit ed6fa9b019d2 · 2024-01-19T21:56:47.000+08:00
diff --git a/node_groups.tf b/node_groups.tf
@@ -30,7 +30,7 @@ data "aws_iam_policy_document" "cni_ipv6_policy" {
   statement {
     sid       = "CreateTags"
     actions   = ["ec2:CreateTags"]
-    resources = ["arn:aws:ec2:*:*:network-interface/*"]
+    resources = ["arn:${data.aws_partition.current.partition}:ec2:*:*:network-interface/*"]
   }
 }
 

Original file line number	Diff line number	Diff line change
`@@ -30,7 +30,7 @@ data "aws_iam_policy_document" "cni_ipv6_policy" {`
`30`	`30`	`statement {`
`31`	`31`	`sid = "CreateTags"`
`32`	`32`	`actions = ["ec2:CreateTags"]`
`33`		`- resources = ["arn:aws:ec2:::network-interface/*"]`
	`33`	`+ resources = ["arn:${data.aws_partition.current.partition}:ec2:::network-interface/*"]`
`34`	`34`	`}`
`35`	`35`	`}`
`36`	`36`