Merge pull request #1 from NIT-Administrative-Systems/cw-permissions

add :* to cloudwatch log arn in IAM (terraform no longer adds)
NIT-Administrative-Systems · Oct 16, 2020 · 086151d · 086151d
2 parents 901cb21 + cf54084
commit 086151d
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lambda_security.tf b/lambda_security.tf
@@ -27,7 +27,7 @@ data "aws_iam_policy_document" "lambda_access_policy" {
   statement {
     effect    = "Allow"
     actions   = ["logs:CreateLogStream", "logs:PutLogEvents"]
-    resources = [aws_cloudwatch_log_group.lambda_log_group.arn]
+    resources = ["${aws_cloudwatch_log_group.lambda_log_group.arn}:*"]
   }
 
   statement {