This will create a policy that allows writing to cloudwatch logs and attach it to the supplied role.
module "policy" {
source = "github.com/chanzuckerberg/cztack/aws-iam-policy-cwlogs?ref=v0.14.0"
iam_path = "..."
target_role = "..."
depends_on = [...]
}
Name | Description | Type | Default | Required |
---|---|---|---|---|
iam_path | string | "/" |
no | |
role_name | The role to which this policy should be attached. | string | n/a | yes |