X-Git-Url: http://git.squeep.com/?p=awsible;a=blobdiff_plain;f=infrastructure%2Fmodules%2Fmanagement-stack%2Fiam.tf;h=78783a152464e82df065d7d4381e0daa8a4997ed;hp=3f8513448eacfd1bd8e796f55d796b7023dfc803;hb=73fe1815838073d5120358020a1ad151918e45f4;hpb=0d01159a10c892df107142341eff662d4ca57dc5

diff --git a/infrastructure/modules/management-stack/iam.tf b/infrastructure/modules/management-stack/iam.tf
index 3f85134..78783a1 100644
--- a/infrastructure/modules/management-stack/iam.tf
+++ b/infrastructure/modules/management-stack/iam.tf
@@ -23,10 +23,15 @@ data "aws_iam_policy_document" "management" {
 		sid = "AWSControl"
 		actions = [
 			"autoscaling:*",
+			"cloudwatch:ListMetrics",
+			"cloudwatch:GetMetricStatistics",
+			"cloudwatch:Describe*",
 			"ec2:*",
 			"elasticloadbalancing:*",
 			"iam:PassRole",
-			"iam:GetServerCertificate"
+			"iam:GetServerCertificate",
+			"logs:DescribeLogStreams",
+			"logs:PutLogEvents",
 		]
 		resources = [
 			"*"