[Bug Fix] wordpress/* - Fixed missing logs:CreateLogGroup permission

williamsia · May 16, 2019 · f44292b · f44292b
1 parent 3809397
commit f44292b
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/wordpress/wordpress-ha-aurora.yaml b/wordpress/wordpress-ha-aurora.yaml
@@ -569,6 +569,7 @@ Resources:
             - 'logs:CreateLogStream'
             - 'logs:PutLogEvents'
             - 'logs:DescribeLogStreams'
+            - 'logs:CreateLogGroup'
             Resource: !GetAtt 'WebServerLogs.Arn'
   WebServerIAMPolicySSHAccess:
     Type: 'AWS::IAM::Policy'

diff --git a/wordpress/wordpress-ha.yaml b/wordpress/wordpress-ha.yaml
@@ -555,6 +555,7 @@ Resources:
             - 'logs:CreateLogStream'
             - 'logs:PutLogEvents'
             - 'logs:DescribeLogStreams'
+            - 'logs:CreateLogGroup'
             Resource: !GetAtt 'WebServerLogs.Arn'
   WebServerIAMPolicySSHAccess:
     Type: 'AWS::IAM::Policy'