Add the lambda permissions to create log group

coralogix · Nov 12, 2024 · 17451e6 · 17451e6
1 parent 90e07c6
commit 17451e6
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/template.yaml b/template.yaml
@@ -605,6 +605,14 @@ Resources:
       PolicyDocument:
         Version: "2012-10-17"
         Statement:
+          # Create and write to log group for the lambda logs
+          - Effect: Allow
+            Action:
+              - 'logs:CreateLogGroup'
+              - 'logs:CreateLogStream'
+              - 'logs:PutLogEvents'
+            Resource: !Sub 'arn:aws:logs:${AWS::Region}:${AWS::AccountId}:log-group:/aws/lambda/*' 
+
           # Assume Role Policy
           - !If
             - IsLambdaAssumeRoleEnable