cloudformation-template
cloudformation-template copied to clipboard
fix: adds missing logs permissions
What does this PR do?
- Adds several logs permissions to the inline policy:
- logs:DescribeLogGroups
- logs:DescribeLogStreams
- logs:FilterLogEvents
Motivation
- With the currently released permissions set, in AWS Lambda Integration
Configuration->Status
we see the error like on the screenshot below:
Datadog could not query some of your AWS accounts properly.
What inspired you to submit this pull request?
This must be a common issue for the stack users.
Testing Guidelines
Adding these permissions to the inline policy of DatadogIntegrationRole changes the status of the integration to OK.
Additional Notes
N/A