Add logs:DescribeMetricFilters to Custom IAM Policy section.

2026-10-04 02:04:06 +00:00 · 2017-01-09 20:27:29 +09:00
parent aa6cd9c614
commit 931da9920e
1 changed files with 1 additions and 0 deletions
@@ -436,6 +436,7 @@ Instead of using default policy SecurityAudit for the account you use for checks
            "kms:list*",
            "lambda:getpolicy",
            "lambda:listfunctions",
+            "logs:DescribeMetricFilters",
            "rds:describe*",
            "rds:downloaddblogfileportion",
            "rds:listtagsforresource",