diff --git a/src/lib/index.ts b/src/lib/index.ts
index 5478aad..0a82039 100644
--- a/src/lib/index.ts
+++ b/src/lib/index.ts
@@ -219,7 +219,7 @@ class ServerlessIamPerFunctionPlugin {
     //set log statements
     policyStatements[0] = {
       Effect: "Allow",
-      Action: ["logs:CreateLogStream", "logs:PutLogEvents"],
+      Action: ["logs:CreateLogStream", "logs:CreateLogGroup", "logs:PutLogEvents"],
       Resource: [
         {
           'Fn::Sub': 'arn:${AWS::Partition}:logs:${AWS::Region}:${AWS::AccountId}' +