Add some CloudWatch permissions for Fargate deploys

thunderbird · Jan 15, 2025 · 388e904 · 388e904
1 parent f8576bc
commit 388e904
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/tb_pulumi/ci.py b/tb_pulumi/ci.py
@@ -261,6 +261,9 @@ def __init__(
                             'Sid': 'GlobalObjectReadAccess',
                             'Effect': 'Allow',
                             'Action': [
+                                'cloudwatch:Describe*',
+                                'cloudwatch:List*',
+                                'cloudwatch:TagResource',
                                 'ec2:List*',
                                 'ec2:Get*',
                                 'ec2:Describe*',