Merge pull request #91 from domain-protect/policy-update

chore: updated logs permissions
domain-protect · Sep 27, 2024 · f6fdfae · f6fdfae
2 parents cb12643 + 2d32c26
commit f6fdfae
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/aws-iam-policies/domain-protect-deploy.json b/aws-iam-policies/domain-protect-deploy.json
@@ -184,14 +184,15 @@
         "logs:DeleteRetentionPolicy",
         "logs:DescribeLogGroups",
         "logs:DisassociateKmsKey",
+        "logs:ListTagsForResource",
         "logs:ListTagsLogGroup",
         "logs:PutRetentionPolicy",
         "logs:TagLogGroup",
         "logs:UntagLogGroup"
       ],
       "Resource": [
         "arn:aws:logs:eu-west-1:SECURITY_AWS_ACCOUNT_ID:log-group::log-stream:",
-        "arn:aws:logs:eu-west-1:SECURITY_AWS_ACCOUNT_ID:log-group:/aws/vendedlogs/states/*:log-stream:"
+        "arn:aws:logs:eu-west-1:SECURITY_AWS_ACCOUNT_ID:log-group:/aws/vendedlogs/states/*"
       ]
     }
   ]