Permissions required for cloudwatch logs

[imduffy15]

Hi,

I'm not seeing any mention of a required IAM instance profile with an attached policy to allow sending logs to cloudwatch documented at http://stups.readthedocs.io/en/latest/components/taupage.html#cloudwatch-logs

I would assume logs:CreateLogStream and logs:PutLogEvent as per http://docs.aws.amazon.com/awscloudtrail/latest/userguide/send-cloudtrail-events-to-cloudwatch-logs.html are required.

Is this being handled in a different way?