fix: Add cloudtrail:LookupEvents IAM rights (#19)

To fix following error: User: arn:aws:sts::XYZ:assumed-role/datadog-integration-role/vault-app3.eu1.prod.dog-datadog-delancie-crawlerXYZ is not authorized to perform: cloudtrail:LookupEvents
scribd · Oct 29, 2020 · bba2d91 · bba2d91
1 parent 2bf68d7
commit bba2d91
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/main.tf b/main.tf
@@ -63,6 +63,7 @@ resource "aws_iam_policy" "datadog-core" {
         "cloudfront:ListDistributions",
         "cloudtrail:DescribeTrails",
         "cloudtrail:GetTrailStatus",
+        "cloudtrail:LookupEvents",
         "cloudwatch:Describe*",
         "cloudwatch:Get*",
         "cloudwatch:List*",