diff --git a/pkg/model/iam/iam_builder_test.go b/pkg/model/iam/iam_builder_test.go
index 8bfb6279d4..a96bb28113 100644
--- a/pkg/model/iam/iam_builder_test.go
+++ b/pkg/model/iam/iam_builder_test.go
@@ -163,6 +163,9 @@ func TestPolicyGeneration(t *testing.T) {
 							},
 						},
 					},
+					CloudProvider: kops.CloudProviderSpec{
+						AWS: &kops.AWSSpec{},
+					},
 					CloudConfig: &kops.CloudConfiguration{
 						AWSEBSCSIDriver: &kops.AWSEBSCSIDriver{
 							Enabled: fi.Bool(true),
diff --git a/pkg/model/iam/tests/iam_builder_node_strict.json b/pkg/model/iam/tests/iam_builder_node_strict.json
index 22c1c1b074..cb64b79cf3 100644
--- a/pkg/model/iam/tests/iam_builder_node_strict.json
+++ b/pkg/model/iam/tests/iam_builder_node_strict.json
@@ -9,8 +9,6 @@
         "arn:aws-test:s3:::kops-tests/iam-builder-test.k8s.local/addons/*",
         "arn:aws-test:s3:::kops-tests/iam-builder-test.k8s.local/cluster-completed.spec",
         "arn:aws-test:s3:::kops-tests/iam-builder-test.k8s.local/igconfig/node/*",
-        "arn:aws-test:s3:::kops-tests/iam-builder-test.k8s.local/pki/private/kube-proxy/*",
-        "arn:aws-test:s3:::kops-tests/iam-builder-test.k8s.local/pki/private/kubelet/*",
         "arn:aws-test:s3:::kops-tests/iam-builder-test.k8s.local/secrets/dockerconfig"
       ]
     },
diff --git a/pkg/model/iam/tests/iam_builder_node_strict_ecr.json b/pkg/model/iam/tests/iam_builder_node_strict_ecr.json
index e83e55857e..99e55ded5a 100644
--- a/pkg/model/iam/tests/iam_builder_node_strict_ecr.json
+++ b/pkg/model/iam/tests/iam_builder_node_strict_ecr.json
@@ -9,8 +9,6 @@
         "arn:aws-test:s3:::kops-tests/iam-builder-test.k8s.local/addons/*",
         "arn:aws-test:s3:::kops-tests/iam-builder-test.k8s.local/cluster-completed.spec",
         "arn:aws-test:s3:::kops-tests/iam-builder-test.k8s.local/igconfig/node/*",
-        "arn:aws-test:s3:::kops-tests/iam-builder-test.k8s.local/pki/private/kube-proxy/*",
-        "arn:aws-test:s3:::kops-tests/iam-builder-test.k8s.local/pki/private/kubelet/*",
         "arn:aws-test:s3:::kops-tests/iam-builder-test.k8s.local/secrets/dockerconfig"
       ]
     },