add cloudwatch permissions

Author: matteopasa

templates_cspm_eventbridge/FullInstall.yaml

@@ -192,6 +192,7 @@ Resources:
                 Action:
                   - "events:DescribeApiDestination"
                   - "events:DescribeConnection"
+                  - "cloudwatch:GetMetricStatistics"
                 Resource: "*"
 
   EventBridgeRule:

templates_cspm_eventbridge/OrgFullInstall.yaml

@@ -223,6 +223,7 @@ Resources:
                 Action:
                   - "events:DescribeApiDestination"
                   - "events:DescribeConnection"
+                  - "cloudwatch:GetMetricStatistics"
                 Resource: "*"
   RolesStackSet:
     Type: AWS::CloudFormation::StackSet
@@ -353,6 +354,7 @@ Resources:
                         Action:
                           - "events:DescribeApiDestination"
                           - "events:DescribeConnection"
+                          - "cloudwatch:GetMetricStatistics"
                         Resource: "*"
   EBRuleStackSet:
     Type: AWS::CloudFormation::StackSet

templates_eventbridge/EventBridge.yaml

@@ -144,6 +144,7 @@ Resources:
                 Action:
                   - "events:DescribeApiDestination"
                   - "events:DescribeConnection"
+                  - "cloudwatch:GetMetricStatistics"
                 Resource: "*"
 
   EventBridgeRule:

templates_eventbridge/OrgEventBridge.yaml

@@ -180,6 +180,7 @@ Resources:
                 Action:
                   - "events:DescribeApiDestination"
                   - "events:DescribeConnection"
+                  - "cloudwatch:GetMetricStatistics"
                 Resource: "*"
 
   MgmtAccEBRuleStackSet:
@@ -347,6 +348,7 @@ Resources:
                         Action:
                           - "events:DescribeApiDestination"
                           - "events:DescribeConnection"
+                          - "cloudwatch:GetMetricStatistics"
                         Resource: "*"
 
   # StackSet for member accounts - EventBridge resources deployment