Add logs:CreateLogGroup action to default policy

functionalone · May 23, 2020 · bfd5132 · bfd5132
1 parent f9fd677
commit bfd5132
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/lib/index.ts b/src/lib/index.ts
@@ -219,7 +219,7 @@ class ServerlessIamPerFunctionPlugin {
     //set log statements
     policyStatements[0] = {
       Effect: "Allow",
-      Action: ["logs:CreateLogStream", "logs:PutLogEvents"],
+      Action: ["logs:CreateLogStream", "logs:CreateLogGroup", "logs:PutLogEvents"],
       Resource: [
         {
           'Fn::Sub': 'arn:${AWS::Partition}:logs:${AWS::Region}:${AWS::AccountId}' +