diff --git a/main.tf b/main.tf
index 988c126..25b4a25 100644
--- a/main.tf
+++ b/main.tf
@@ -38,6 +38,7 @@ data "aws_iam_policy_document" "main" {
     effect = "Allow"
 
     actions = [
+      "logs:CreateLogGroup",
       "logs:CreateLogStream",
       "logs:PutLogEvents",
     ]