v3.4.1; add logs:ListTagsForResource to build and apply roles

cu-cit-cloud-team · Nov 4, 2024 · 0d4f2f4 · 0d4f2f4
1 parent 572db33
commit 0d4f2f4
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 2 deletions.
diff --git a/README.md b/README.md
@@ -18,6 +18,9 @@ Terraform module to create Terraform drift, plan, and apply CodePipelines.
 
 ## Change Log
 
+### 3.4.1
+- Add `logs:ListTagsForResource` privs to build and apply roles
+
 ### 3.4.0
 - Add public access block (`aws_s3_bucket_public_access_block`) to resource/pipeline bucket
 - Add bucket policy (`aws_s3_bucket_policy`) blocking insecure transport to resource/pipeline bucket

diff --git a/shared.tf b/shared.tf
@@ -212,7 +212,8 @@ resource "aws_iam_policy" "build-policy" {
         "logs:CreateLogStream",
         "logs:PutLogEvents",
         "logs:DescribeLogGroups",
-        "logs:ListTagsLogGroup"
+        "logs:ListTagsLogGroup",
+        "logs:ListTagsForResource"
       ]
     },
     {
@@ -284,7 +285,8 @@ resource "aws_iam_policy" "apply-policy" {
         "logs:CreateLogStream",
         "logs:PutLogEvents",
         "logs:DescribeLogGroups",
-        "logs:ListTagsLogGroup"
+        "logs:ListTagsLogGroup",
+        "logs:ListTagsForResource"
       ]
     },
     {