fix: add missing CloudWatch Log Groups permissions

api3dao · Feb 7, 2025 · 34b3d91 · 34b3d91
1 parent c974cbe
commit 34b3d91
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 0 deletions.
diff --git a/.changeset/gold-plums-allow.md b/.changeset/gold-plums-allow.md
@@ -0,0 +1,5 @@
+---
+"@api3/airnode-deployer": minor
+---
+
+Bump hashicorp/terraform-provider-aws to v5
diff --git a/packages/airnode-deployer/terraform/aws/modules/function/data.tf b/packages/airnode-deployer/terraform/aws/modules/function/data.tf
@@ -18,6 +18,9 @@ data "aws_iam_policy_document" "cloudwatch_log_policy" {
     actions = [
       "logs:CreateLogStream",
       "logs:PutLogEvents",
+      "logs:ListTagsForResource",
+      "logs:TagResource",
+      "logs:UntagResource"
     ]
     resources = ["${aws_cloudwatch_log_group.cloudwatch_log_group.arn}:*"]
   }