refactor: Update to the EBS CSI Driver IAM Policy for AWS 2025 changes

[lostsnow]

Description

kubernetes-sigs/aws-ebs-csi-driver#2190

In January of 2025, AWS will change the handling of IAM polices authorizing the CreateVolume action. Previously, only the created volume was authorized when using CreateVolume to restore a snapshot. After the change, the snapshot being restored will also be authorized. Because of this change, the policy being used for the EBS CSI Driver must grant explicit access to the snapshot being restored.

If no action is taken before the change takes place, the EBS CSI Driver will be unable to restore snapshots when creating a volume.

Type of change

• A bug fix (PR prefix fix)
• A new feature (PR prefix feat)
• A code change that neither fixes a bug nor adds a feature (PR prefix refactor)
• Adding missing tests or correcting existing tests (PR prefix test)
• Changes that do not affect the meaning of the code like white-spaces, formatting, missing semi-colons, etc. (PR prefix style)
• Changes to our CI configuration files and scripts (PR prefix ci)
• Documentation only changes (PR prefix docs)

How Has This Been Tested?

[jaygridley]

LGTM

[Balsir]

@lostsnow Thank you for the contribution!