bug: `simplifyBaseIAMLogGroups` function is not taking others statements used in the iam role definition

[frangeris]

Hi there, quick issue report

The function that rewrite the Statement is discarting any other permissions being used and previously defined, only the logs actions are being attached:

"Action": [
  "logs:CreateLogStream",
  "logs:CreateLogGroup",
  "logs:PutLogEvents"
],

I have others required permissions that are not included in the final policy:

      statements:
        - Effect: Allow
          Action:
            - "s3:*"
          Resource: "*"
        - Effect: Allow
          Action:
            - "cloudwatch:*"
            - "logs:*"
          Resource: "*"
        - Effect: Allow
          Action:
            - "lambda:InvokeFunction"
          Resource: "*"
        - Effect: Allow
          Action:
            - "ssm:GetParameter"
            - "ssm:GetParametersByPath"
            - "ssm:PutParameter"
            - "ssm:DescribeParameters"
          Resource: "*"
        - Effect: Allow
          Action:
            - "events:PutEvents"
          Resource: "*"

[fisrar-dev]

@frangeris were you able to find a workaround or an alternate for this? I too am facing the same problem.

[frangeris]

Hey @fisrar-dev , yea, there is an open pr, for now apply it as patch, has been working for the last 2 weeks