Don't deny createVolume (#23)

In #21, the policy was updated to fix snapshots, but erroneously, an extra deny was added for CreateVolume This fixes that and bumps the version
streamnative · May 31, 2023 · 4cb0a64 · 4cb0a64
1 parent f5634f0
commit 4cb0a64
Show file tree

Hide file tree

Showing 2 changed files with 1 addition and 2 deletions.
diff --git a/modules/aws/files/runtime_iam_policy.json.tpl b/modules/aws/files/runtime_iam_policy.json.tpl
@@ -108,7 +108,6 @@
             "Sid": "vbcd",
             "Effect": "Deny",
             "Action": [
-                "ec2:CreateVolume",
                 "ec2:CreateSnapshot"
             ],
             "Resource": "*",

diff --git a/modules/aws/variables.tf b/modules/aws/variables.tf
@@ -69,7 +69,7 @@ variable "s3_bucket_pattern" {
 }
 
 variable "sn_policy_version" {
-  default     = "3.1.0"
+  default     = "3.1.1"
   description = "The value of SNVersion tag"
   type        = string
 }