fix: Remove CreateLogGroup permission from service role (#550)

4d31b0d7 · Léo Gillot-Lamure · GitHub · bf8fbac5 · 4d31b0d7
Commit 4d31b0d7 authored Feb 23, 2021 by Léo Gillot-Lamure Committed by GitHub Feb 23, 2021
Hide whitespace changes
Inline Side-by-side

Showing with 0 additions and 1 deletion

vpc-flow-logs.tf vpc-flow-logs.tf +0 -1

No files found.
--- a/vpc-flow-logs.tf
+++ b/vpc-flow-logs.tf
@@ -90,7 +90,6 @@ data "aws_iam_policy_document" "vpc_flow_log_cloudwatch" {
    effect = "Allow"

    actions = [
-      "logs:CreateLogGroup",
      "logs:CreateLogStream",
      "logs:PutLogEvents",
      "logs:DescribeLogGroups",