add more permissions for the aws gateway controller as recommended fr…

…om official documents
aws-ia · Dec 7, 2023 · 38adfa8 · 38adfa8
1 parent 0e9d6c9
commit 38adfa8
Showing 1 changed file with 8 additions and 1 deletion.
diff --git a/main.tf b/main.tf
@@ -3564,7 +3564,14 @@ data "aws_iam_policy_document" "aws_gateway_api_controller" {
       "iam:CreateServiceLinkedRole",
       "ec2:DescribeVpcs",
       "ec2:DescribeSubnets",
-      "ec2:DescribeTags"
+      "ec2:DescribeTags",
+      "ec2:DescribeSecurityGroups",
+      "logs:CreateLogDelivery",
+      "logs:GetLogDelivery",
+      "logs:UpdateLogDelivery",
+      "logs:DeleteLogDelivery",
+      "logs:ListLogDeliveries",
+      "tag:GetResources"
     ]
     resources = ["*"]
   }