fix: Remove CreateLogGroup permission from service role (terraform-aw…

…s-modules#550)
lolocompany · May 11, 2022 · 237f8cc · 237f8cc
1 parent 793c064
commit 237f8cc
Showing 1 changed file with 0 additions and 1 deletion.
diff --git a/vpc-flow-logs.tf b/vpc-flow-logs.tf
@@ -90,7 +90,6 @@ data "aws_iam_policy_document" "vpc_flow_log_cloudwatch" {
     effect = "Allow"
 
     actions = [
-      "logs:CreateLogGroup",
       "logs:CreateLogStream",
       "logs:PutLogEvents",
       "logs:DescribeLogGroups",