adam/seahaven-org-baseline
1
0
Fork 0
mirror of https://github.com/Sea-Haven-Industries/seahaven-org-baseline.git synced 2026-09-30 05:43:17 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

fix(iam): allow API GW Log Delivery on meal-order apply role

Browse source
This commit is contained in:
Adam Moussa 2026-08-10 14:47:30 -04:00
parent 84aa1a803e
commit e10462d25e
No known key found for this signature in database
1 changed files with 15 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

15
lib/terraform-substrate/terraform-substrate.template.yaml
View file

@ -1791,6 +1791,21 @@ Resources:
Action:
- logs:DescribeLogGroups
Resource: "*"
# HTTP API stage access_log_settings uses the Log Delivery APIs.
# These are account-level (Resource "*"); scoped log-group ARNs
# above are insufficient. Mirrors deploy-substrate
# cloudwatch-logs-management LogDelivery actions.
- Sid: MealOrderApiGwAccessLogDelivery
Effect: Allow
Action:
- logs:CreateLogDelivery
- logs:GetLogDelivery
- logs:UpdateLogDelivery
- logs:DeleteLogDelivery
- logs:ListLogDeliveries
- logs:PutResourcePolicy
- logs:DescribeResourcePolicies
Resource: "*"
- Sid: StackBuckets
Effect: Allow
Action: