From cf36b85ff91ab5feec318a3f58abb09937d6ed37 Mon Sep 17 00:00:00 2001
From: Fabian Kammel <fk@edgeless.systems>
Date: Fri, 4 Nov 2022 14:56:13 +0100
Subject: [PATCH] extend permissions to allow logging (#461)

Signed-off-by: Fabian Kammel <fk@edgeless.systems>
---
 hack/terraform/aws/iam/main.tf | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/hack/terraform/aws/iam/main.tf b/hack/terraform/aws/iam/main.tf
index 78a756470..bf2c40acf 100644
--- a/hack/terraform/aws/iam/main.tf
+++ b/hack/terraform/aws/iam/main.tf
@@ -109,6 +109,7 @@ resource "aws_iam_policy" "control_plane_policy" {
         "logs:DescribeLogGroups",
         "logs:ListTagsLogGroup",
         "logs:CreateLogStream",
+        "logs:PutLogEvents",
         "tag:GetResources",
         "ec2:DescribeImages"
       ],
@@ -173,6 +174,7 @@ resource "aws_iam_policy" "worker_node_policy" {
         "logs:DescribeLogGroups",
         "logs:ListTagsLogGroup",
         "logs:CreateLogStream",
+        "logs:PutLogEvents",
         "tag:GetResources",
         "ec2:DescribeImages"
       ],