"ec2:DescribeAvailabilityZones",
"ec2:DescribeVolumesModifications"
"arn:aws:ec2:*:*:volume/*",
"arn:aws:ec2:*:*:snapshot/*"
"arn:aws:ec2:*:*:volume/*",
"arn:aws:ec2:*:*:snapshot/*"
"aws:RequestTag/ebs.csi.aws.com/cluster": "true"
"aws:RequestTag/CSIVolumeName": "*"
"aws:RequestTag/kubernetes.io/cluster/*": "owned"
"ec2:ResourceTag/ebs.csi.aws.com/cluster": "true"
"ec2:ResourceTag/CSIVolumeName": "*"
"ec2:ResourceTag/kubernetes.io/cluster/*": "owned"
"ec2:ResourceTag/CSIVolumeSnapshotName": "*"
"ec2:ResourceTag/ebs.csi.aws.com/cluster": "true"