Fluentbit: Allow fluent-bit to create log groups (#130)

* Fluentbit: Allow fluent-bit to create log groups

* Update fluentbit policy to add retention period for logs

* Removed conditional log group creating check

modules/essentials/data.tf

@@ -30,9 +30,11 @@ data "aws_iam_policy_document" "fluent_bit" {
     resources = ["arn:aws:logs:${data.aws_region.current.name}:${data.aws_caller_identity.current.account_id}:log-group:*"]
 
     actions = [
+      "logs:CreateLogGroup",
       "logs:CreateLogStream",
       "logs:DescribeLogGroups",
       "logs:DescribeLogStreams",
+      "logs:PutRetentionPolicy",
     ]
   }
 }