ec2:DescribeVpcs missing from documentation as required for TargetGroupBinding SA minimal permissions

[cdhesse]

Describe the bug
IAM Permissions for TargetGroupBinding only, states the following permissions:

{
    "Statement": [
        {
            "Action": [
                "ec2:DescribeSecurityGroups",
                "ec2:DescribeInstances",
                "elasticloadbalancing:DescribeTargetGroups",
                "elasticloadbalancing:DescribeTargetHealth",
                "elasticloadbalancing:ModifyTargetGroup",
                "elasticloadbalancing:ModifyTargetGroupAttributes",
                "elasticloadbalancing:RegisterTargets",
                "elasticloadbalancing:DeregisterTargets"
            ],
            "Effect": "Allow",
            "Resource": "*"
        }
    ],
    "Version": "2012-10-17"
}

It is missing "ec2:DescribeVpcs".

Steps to reproduce
Deploy the custom resource for TargetGroupBinding providing the SA with the permissions specified. The logs state "unauthorized", but don't indicate what is causing the error. Looking in CloudTrail you can find the offending "DescribeVpcs" call failing. Adding this permission fixes the error and the target group is updated.

Expected outcome
The aws-load-balancer-controller service account should work with the permissions documented.

Environment

• AWS Load Balancer controller version 2.4.0
• Kubernetes version 1.21
• Using EKS (yes/no), if so version? yes

Additional Context:

[kishorj]

/kind documentation