Updated the permission resources in the readme for DescribeLogGroups (#…

…83) Permissions for listing the existing log groups need to be able to list all the log groups on the account, to allow it to filter the groups based on the log group name.
maxbanton · Mar 2, 2020 · 002a9f3 · 002a9f3
1 parent 7f82214
commit 002a9f3
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/README.md b/README.md
@@ -105,13 +105,15 @@ When setting the `$createGroup` argument to `false`, permissions `DescribeLogGro
     "Statement": [
         {
             "Effect": "Allow",
-            "Action": "logs:CreateLogGroup",
+            "Action": [
+                "logs:CreateLogGroup",
+                "logs:DescribeLogGroups"
+            ],
             "Resource": "*"
         },
         {
             "Effect": "Allow",
             "Action": [
-                "logs:DescribeLogGroups",
                 "logs:CreateLogStream",
                 "logs:DescribeLogStreams",
                 "logs:PutRetentionPolicy"