From 002a9f338a6d682b44d9ed0c741d4474a218a776 Mon Sep 17 00:00:00 2001 From: Duncan Barclay Date: Mon, 2 Mar 2020 14:25:32 +0000 Subject: [PATCH] Updated the permission resources in the readme for DescribeLogGroups (#83) Permissions for listing the existing log groups need to be able to list all the log groups on the account, to allow it to filter the groups based on the log group name. --- README.md | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index 012322d..6f14395 100644 --- a/README.md +++ b/README.md @@ -105,13 +105,15 @@ When setting the `$createGroup` argument to `false`, permissions `DescribeLogGro "Statement": [ { "Effect": "Allow", - "Action": "logs:CreateLogGroup", + "Action": [ + "logs:CreateLogGroup", + "logs:DescribeLogGroups" + ], "Resource": "*" }, { "Effect": "Allow", "Action": [ - "logs:DescribeLogGroups", "logs:CreateLogStream", "logs:DescribeLogStreams", "logs:PutRetentionPolicy"