lazywithclass/winston-cloudwatch

Suggest AMI Permissions

Closed this issue · 3 comments

evantahler commented

Hi!

Can you please recommend the minimum AMI permissions that would be needed to use this library? It looks like we are both reading and writing to Cloudwatch logGroups.

Thanks!

harryscholes commented

CloudWatchLogsFullAccess works for me

mrdavidrees commented

looking at the source, it should require these IAM permisions

DescribeLogStreams
CreateLogGroup
CreateLogStream
PutLogEvents
PutRetentionPolicy

lazywithclass commented

Yes it's like @mrdavidrees said.