Datadog policy includes S3 GetObject?

[LuigiClemente-Awin]

Hi all

I see that in the "all" policy attached to the Datadog role has been added the s3:GetObject action:

terraform-aws-datadog-integration/all.tf

Line 64 in c70209d

"s3:GetObject",

I do not understand why it should be needed and it is not listed in the official Datadog documentation:
https://docs.datadoghq.com/integrations/amazon_web_services/?tab=roledelegation

                "s3:GetBucketLogging",
                "s3:GetBucketLocation",
                "s3:GetBucketNotification",
                "s3:GetBucketTagging",
                "s3:ListAllMyBuckets",
                "s3:PutBucketNotification",

Is this a typo?
Same for s3:ListObjects, but the security concern about GetObject seems greater in my opinion.

Thanks,

Luigi

[LuigiClemente-Awin]

I see this hasn't changed...

[joe-niland]

Fixed in #46