Merge pull request #5459 from ministryofjustice/dso/add-transit-gw-re…

…source-to-read-firewall-policy add ability to read transit-gateway flow logs
ministryofjustice · Nov 14, 2023 · 8e2174b · 8e2174b
2 parents 3b38a88 + 7512ea3
commit 8e2174b
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/terraform/environments/core-network-services/iam.tf b/terraform/environments/core-network-services/iam.tf
@@ -164,6 +164,7 @@ resource "aws_iam_role_policy" "read_firewall" {
           "arn:aws:logs:*:*:log-group:fw-*:log-stream:*",
           "arn:aws:logs:*:*:log-group:*-vpc-flow-logs-*:log-stream:*",
           "arn:aws:logs:*:*:log-group:external-inspection-flow-logs:log-stream:*",
+          "arn:aws:logs:*:*:log-group:tgw-*:log-stream:*"
         ],
       },
       {