fix: Gateway-api-controller lacks permissions to create and describe …

…required resources (#329) Co-authored-by: ruban suthan <[email protected]>
aws-ia · Dec 7, 2023 · 1f7cf9c · 1f7cf9c
1 parent 0e9d6c9
commit 1f7cf9c
Showing 1 changed file with 8 additions and 1 deletion.
diff --git a/main.tf b/main.tf
@@ -3564,7 +3564,14 @@ data "aws_iam_policy_document" "aws_gateway_api_controller" {
       "iam:CreateServiceLinkedRole",
       "ec2:DescribeVpcs",
       "ec2:DescribeSubnets",
-      "ec2:DescribeTags"
+      "ec2:DescribeTags",
+      "ec2:DescribeSecurityGroups",
+      "logs:CreateLogDelivery",
+      "logs:GetLogDelivery",
+      "logs:UpdateLogDelivery",
+      "logs:DeleteLogDelivery",
+      "logs:ListLogDeliveries",
+      "tag:GetResources"
     ]
     resources = ["*"]
   }