aws: Add s3:ListBucketMultipartUploads permissions to IAM policies (#7664)

docs/pages/kubernetes-access/helm/guides/aws.mdx

@@ -106,6 +106,7 @@ You'll need to replace these values in the policy example below:
                 "s3:GetEncryptionConfiguration",
                 "s3:GetObjectRetention",
                 "s3:ListBucketVersions",
+                "s3:ListBucketMultipartUploads",
                 "s3:CreateBucket",
                 "s3:ListBucket",
                 "s3:GetBucketVersioning",

examples/aws/cloudformation/ent.yaml

@@ -730,6 +730,7 @@ Resources:
             Action:
             - "s3:ListBucket"
             - "s3:ListBucketVersions"
+            - "s3:ListBucketMultipartUploads"
 
           -
             Effect: "Allow"
@@ -816,6 +817,7 @@ Resources:
             Action:
             - "s3:ListBucket"
             - "s3:ListBucketVersions"
+            - "s3:ListBucketMultipartUploads"
 
           -
             Effect: "Allow"

examples/aws/cloudformation/oss.yaml

@@ -730,6 +730,7 @@ Resources:
             Action:
             - "s3:ListBucket"
             - "s3:ListBucketVersions"
+            - "s3:ListBucketMultipartUploads"
 
           -
             Effect: "Allow"
@@ -816,6 +817,7 @@ Resources:
             Action:
             - "s3:ListBucket"
             - "s3:ListBucketVersions"
+            - "s3:ListBucketMultipartUploads"
 
           -
             Effect: "Allow"

examples/aws/terraform/ha-autoscale-cluster/auth_iam.tf

@@ -135,7 +135,8 @@ resource "aws_iam_role_policy" "auth_s3" {
        "Effect": "Allow",
        "Action": [
          "s3:ListBucket",
-         "s3:ListBucketVersions"
+         "s3:ListBucketVersions",
+         "s3:ListBucketMultipartUploads"
         ],
        "Resource": ["arn:aws:s3:::${aws_s3_bucket.certs.bucket}"]
      },
@@ -150,7 +151,7 @@ resource "aws_iam_role_policy" "auth_s3" {
      }
    ]
  }
- 
+
 EOF
 
 }

examples/aws/terraform/starter-cluster/cluster_iam.tf

@@ -1,4 +1,4 @@
-/* 
+/*
 An IAM Role and Policies are used to permit
 EC2 instances to communicate with various AWS
 resources.
@@ -43,7 +43,8 @@ resource "aws_iam_role_policy" "cluster_s3" {
        "Effect": "Allow",
        "Action": [
          "s3:ListBucket",
-         "s3:ListBucketVersions"
+         "s3:ListBucketVersions",
+         "s3:ListBucketMultipartUploads"
       ],
        "Resource": ["arn:aws:s3:::${aws_s3_bucket.storage.bucket}"]
      },
@@ -58,7 +59,7 @@ resource "aws_iam_role_policy" "cluster_s3" {
      }
    ]
  }
- 
+
 EOF
 
 }