Description

Add enhancements to issue > #26 (comment)

User: arn:aws:sts::aws-acc-id:assumed-role/irsa-k8s-alb-prod/1744547382731549898 is not authorized to perform: elasticloadbalancing:SetRulePriorities on resource: arn:aws:elasticloadbalancing:ap-south-1:aws-acc-id:listener-rule/app/alb-prod/8db67800d053e98e/cb6e3eb9b0d22f03/d7bf97040d690e46 because no identity-based policy allows the elasticloadbalancing:SetRulePriorities action

to pass into module:

data "aws_iam_policy_document" "alb_additional_iam_policy" {
  statement {
    effect = "Allow"
    actions = [
      "elasticloadbalancing:SetRulePriorities",
    ]
    resources = ["*"]
  }
}

## input variable
additional_iam_policy = data.aws_iam_policy_document.alb_additional_iam_policy.json

Changes on IAM policies with this PR

{
      Action   = [
          "elasticloadbalancing:SetWebAcl",
          "elasticloadbalancing:RemoveListenerCertificates",
          "elasticloadbalancing:ModifyRule",
          "elasticloadbalancing:ModifyListener",
          "elasticloadbalancing:AddListenerCertificates",
      ]
      Effect   = "Allow"
      Resource = "*"
    },
  + {
      + Action   = "elasticloadbalancing:SetRulePriorities"
      + Effect   = "Allow"
      + Resource = "*"
    },
]
}

• We should allow use to pass additional IAM policy so that we dont block user with AWS changes to future policies.
• use combine method to add new policies https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/iam_policy_document

Type of change

• A bug fix (PR prefix fix)
• A new feature (PR prefix feat)
• A code change that neither fixes a bug nor adds a feature (PR prefix refactor)
• Adding missing tests or correcting existing tests (PR prefix test)
• Changes that do not affect the meaning of the code like white-spaces, formatting, missing semi-colons, etc. (PR prefix style)
• Changes to our CI configuration files and scripts (PR prefix ci)
• Documentation only changes (PR prefix docs)

How Has This Been Tested?

Yes, added a terraform plan in PR description.