You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: Monitoring/ingest_nas_audit_logs_into_cloudwatch/README.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -62,7 +62,7 @@ Where:
62
62
Notes:
63
63
- Since the Lambda function runs within your VPC it needs to be able to create and delete network interfaces.
64
64
- The AWS Security Group Policy builder incorrectly generates resource lines for the `CreateNetworkInterface`
65
-
and `DeleteNetworkInterface` actions. The correct resource line is `arn:aws:ec2:<region>:<accountID>:*`.
65
+
and `DeleteNetworkInterface` actions. The correct resource line is `arn:aws:ec2:<region>:<accountID>:*`.
66
66
- It needs to be able to create a log groups so it can create a log group for the diagnostic output from the Lambda function.
67
67
- Since the ARN of any Secrets Manager secret has random characters at the end of it, you must add the `*` at the end, or provide the full ARN of the secret.
0 commit comments