From ab6f9515bf7619cbe71cb1c485234fefec2ba7c9 Mon Sep 17 00:00:00 2001
From: Veronika Gnilitska <veronika.gnilitska@gmail.com>
Date: Thu, 22 Feb 2024 12:16:56 +0200
Subject: [PATCH] fix: adds missing logs permissions

---
 aws_quickstart/datadog_integration_role.yaml | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/aws_quickstart/datadog_integration_role.yaml b/aws_quickstart/datadog_integration_role.yaml
index c9b9f36a..495ea136 100644
--- a/aws_quickstart/datadog_integration_role.yaml
+++ b/aws_quickstart/datadog_integration_role.yaml
@@ -108,10 +108,13 @@ Resources:
                   - 'kinesis:Describe*'
                   - 'lambda:GetPolicy'
                   - 'lambda:List*'
-                  - 'logs:TestMetricFilter'
-                  - 'logs:PutSubscriptionFilter'
                   - 'logs:DeleteSubscriptionFilter'
+                  - 'logs:DescribeLogGroups'
+                  - 'logs:DescribeLogStreams'
                   - 'logs:DescribeSubscriptionFilters'
+                  - 'logs:FilterLogEvents'
+                  - 'logs:PutSubscriptionFilter'
+                  - 'logs:TestMetricFilter'
                   - 'oam:ListSinks'
                   - 'oam:ListAttachedLinks'
                   - 'organizations:Describe*'