Fix vpce policy to make etcd backups exporter work on vault VMs. (#720)

giantswarm · Jul 4, 2023 · 916bec8 · 916bec8
1 parent 9b525b2
commit 916bec8
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 1 deletion.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -11,6 +11,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 - nginx-ingress-controller: Improve requests and autoscaling. ([#715](https://github.com/giantswarm/giantnetes-terraform/pull/715))
 
+### Fixed
+
+- [AWS] Fix vpce policy to make etcd backups exporter work on vault VMs.
+
 ## [14.16.0] - 2023-06-21
 
 ### Changed

diff --git a/modules/aws/vpc/vpc.tf b/modules/aws/vpc/vpc.tf
@@ -48,7 +48,7 @@ EOF
       "Principal": "*",
       "Action": "*",
       "Effect": "Allow",
-      "Resource": "arn:${var.arn_region}:s3:::etcd-backups.giantswarm.io/*"
+      "Resource": ["arn:${var.arn_region}:s3:::etcd-backups.giantswarm.io/*", "arn:${var.arn_region}:s3:::etcd-backups.giantswarm.io"]
     },
     {
       "Sid": "CAPA",