Merge pull request #6 from trussworks/barry-awslambdabasicexecutionrole

Allows Lambda to post logs to CloudWatch
trussworks · Oct 9, 2020 · e26a2f1 · e26a2f1
2 parents 0942aec + a60834d
commit e26a2f1
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/main.tf b/main.tf
@@ -38,6 +38,7 @@ data "aws_iam_policy_document" "main" {
     effect = "Allow"
 
     actions = [
+      "logs:CreateLogGroup",
       "logs:CreateLogStream",
       "logs:PutLogEvents",
     ]