fix: fix github issues aws-solutions#227.

owenCCY · Mar 6, 2024 · b298bbb · b298bbb
1 parent 162a4c2
commit b298bbb
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 0 deletions.
diff --git a/source/constructs/lib/pipeline/service/cloudwatch-log-stack.ts b/source/constructs/lib/pipeline/service/cloudwatch-log-stack.ts
@@ -468,6 +468,7 @@ export class CloudWatchLogStack extends SolutionStack {
             ],
             resources: [
               `arn:${Aws.PARTITION}:logs:${Aws.REGION}:${Aws.ACCOUNT_ID}:*`,
+              `arn:${Aws.PARTITION}:logs:*:${Aws.ACCOUNT_ID}:destination:*`,
             ],
           }),
           new iam.PolicyStatement({

diff --git a/source/constructs/lib/pipeline/service/cw-to-firehose-to-s3-stack.ts b/source/constructs/lib/pipeline/service/cw-to-firehose-to-s3-stack.ts
@@ -182,6 +182,7 @@ export class CWtoFirehosetoS3Stack extends Construct {
             ],
             resources: [
               `arn:${Aws.PARTITION}:logs:${Aws.REGION}:${Aws.ACCOUNT_ID}:*`,
+              `arn:${Aws.PARTITION}:logs:*:${Aws.ACCOUNT_ID}:destination:*`,
             ],
           }),
           new iam.PolicyStatement({

diff --git a/source/constructs/lib/subaccount/cross-account-stack.ts b/source/constructs/lib/subaccount/cross-account-stack.ts
@@ -609,6 +609,7 @@ export class CrossAccount extends Stack {
           ],
           resources: [
             `arn:${Aws.PARTITION}:logs:*:${Aws.ACCOUNT_ID}:log-group:*`,
+            `arn:${Aws.PARTITION}:logs:*:${parentAccountId.valueAsString}:destination:*`,
           ],
         }),
         new iam.PolicyStatement({