add ability to read transit-gateway flow logs

ministryofjustice · Nov 13, 2023 · 7512ea3 · 7512ea3
1 parent fc5f96c
commit 7512ea3
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/terraform/environments/core-network-services/iam.tf b/terraform/environments/core-network-services/iam.tf
@@ -164,6 +164,7 @@ resource "aws_iam_role_policy" "read_firewall" {
           "arn:aws:logs:*:*:log-group:fw-*:log-stream:*",
           "arn:aws:logs:*:*:log-group:*-vpc-flow-logs-*:log-stream:*",
           "arn:aws:logs:*:*:log-group:external-inspection-flow-logs:log-stream:*",
+          "arn:aws:logs:*:*:log-group:tgw-*:log-stream:*"
         ],
       },
       {