mirror of
https://github.com/serverless/serverless.git
synced 2026-01-25 15:07:39 +00:00
b8134cb15e
Remove the create log group permissions Add CloudWatch LogGroup to the CFT Reference the co-created CloudWatch LogGroup as one of the resources for the IamPolicyLambdaExecution's logging statement
36 lines
660 B
JSON
36 lines
660 B
JSON
{
|
|
"IamPolicyLambdaExecution": {
|
|
"Type": "AWS::IAM::Policy",
|
|
"Properties": {
|
|
"PolicyName": {
|
|
"Fn:Join": [
|
|
"-",
|
|
[
|
|
"${opt:stage}",
|
|
"${self:service}",
|
|
"lambda"
|
|
]
|
|
]
|
|
},
|
|
"PolicyDocument": {
|
|
"Version": "2012-10-17",
|
|
"Statement": [
|
|
{
|
|
"Effect": "Allow",
|
|
"Action": [
|
|
"logs:CreateLogStream",
|
|
"logs:PutLogEvents"
|
|
],
|
|
"Resource": []
|
|
}
|
|
]
|
|
},
|
|
"Roles": [
|
|
{
|
|
"Ref": "IamRoleLambdaExecution"
|
|
}
|
|
]
|
|
}
|
|
}
|
|
}
|