Merge pull request #6 from trussworks/barry-awslambdabasicexecutionrole

esacteksab · web-flow · commit e26a2f135cbb · 2020-10-09T08:45:47.000-05:00
Allows Lambda to post logs to CloudWatch
diff --git a/main.tf b/main.tf
@@ -38,6 +38,7 @@ data "aws_iam_policy_document" "main" {
     effect = "Allow"
 
     actions = [
+      "logs:CreateLogGroup",
       "logs:CreateLogStream",
       "logs:PutLogEvents",
     ]

Original file line number	Diff line number	Diff line change
`@@ -38,6 +38,7 @@ data "aws_iam_policy_document" "main" {`
`38`	`38`	`effect = "Allow"`
`39`	`39`
`40`	`40`	`actions = [`
	`41`	`+ "logs:CreateLogGroup",`
`41`	`42`	`"logs:CreateLogStream",`
`42`	`43`	`"logs:PutLogEvents",`
`43`	`44`	`]`