fix: Use partition data source on VPC CNI IPv6 policy (#2161)

terraform-aws-modules · Jul 20, 2022 · f2d67ff · f2d67ff
1 parent 67e0f75
commit f2d67ff
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/node_groups.tf b/node_groups.tf
@@ -30,7 +30,7 @@ data "aws_iam_policy_document" "cni_ipv6_policy" {
   statement {
     sid       = "CreateTags"
     actions   = ["ec2:CreateTags"]
-    resources = ["arn:aws:ec2:*:*:network-interface/*"]
+    resources = ["arn:${data.aws_partition.current.partition}:ec2:*:*:network-interface/*"]
   }
 }